CVE Feed

    Dashboard / CVE / CVE-2005-3315

    CVE-2005-3315

    Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.

    Published:Oct 30, 2005
    Last Modified:Apr 16, 2026
    EPS:Oct 30, 2005
    EPSS Score:0.08984
    CVSS Score:7.5

    Affected Products

    Vendor
    Novell
    Product
    Zenworks Patch Management Server

    Exploits

    http://cirt.dk/advisories/cirt-39-advisory.pdfhttp://cirt.dk/advisories/cirt-39-advisory.pdfhttps://www.exploit-db.com/exploits/26429https://www.exploit-db.com/exploits/26430

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://cirt.dk/advisories/cirt-39-advisory.pdf
    http://secunia.com/advisories/17358
    http://securityreason.com/securityalert/124
    http://securitytracker.com/id?1015116
    http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm
    http://www.kb.cert.org/vuls/id/536300
    http://www.osvdb.org/20362
    http://www.osvdb.org/20363
    http://www.securityfocus.com/archive/1/414880
    http://www.securityfocus.com/bid/15220
    http://www.vupen.com/english/advisories/2005/2238
    http://cirt.dk/advisories/cirt-39-advisory.pdf
    http://secunia.com/advisories/17358
    http://securityreason.com/securityalert/124
    http://securitytracker.com/id?1015116
    http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htm
    http://www.kb.cert.org/vuls/id/536300
    http://www.osvdb.org/20362
    http://www.osvdb.org/20363
    http://www.securityfocus.com/archive/1/414880
    http://www.securityfocus.com/bid/15220
    http://www.vupen.com/english/advisories/2005/2238

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High