Back

CVE-2005-4073

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitrary SQL commands via the ListID parameter.

Published: Dec 8, 2005 Modified: Jun 16, 2026
CWE-89

CVSS Metrics

Affected Products (1)

Vendor Product Version
cfmagic magic_list_pro *

GitHub Security Advisory GHSA-r85w-66g6-gv5r

SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.10%

Top 37% most likely to be exploited

Threat Score 30.3 / 100

Data Sources

NVD EPSS GitHub