VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 22, 2005· Updated Jun 16, 2026

CVE-2005-2045

CVE-2005-2045

Description

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the (1) iChannel parameter to default.asp, (2) iData parameter to detail.asp, (3) iMem parameter to members.asp, (4) iCat parameter to cat.asp, (5) offset parameter to members_listing_approval.asp, or (6) iChannel parameter to channels_edit.asp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Duware/Duportal2 versions
    cpe:2.3:a:duware:duportal_pro:3.4.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:duware:duportal_pro:3.4.3:*:*:*:*:*:*:*
    • (no CPE)range: = 3.4.3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.