CVE-2005-4378

Baseline CMS <1.95 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t · textwebappsasp
https://www.exploit-db.com/exploits/26903

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15961
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21939
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/12/baseline-cms-vuln.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2974

Scores

EPSS 0.0106
EPSS Percentile 77.7%

Details

Status published
Products (1)
nma/baseline_cms < 1.95
Published Dec 20, 2005
Tracked Since Feb 18, 2026