Back
CVE-2005-4370
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.
Published: Dec 20, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (3)
| Vendor | Product | Version |
|---|---|---|
| acidcat | acidcat | 2.1.11 |
| acidcat | acidcat | 2.1.12 |
| acidcat | acidcat | 2.1.13 |
GitHub Security Advisory GHSA-8cx9-qhmg-8ch6
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote...
References (12)
- http://hamid.ir/security/acidcat.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/18097 Vendor Advisory
- http://www.osvdb.org/21845
- http://www.securityfocus.com/archive/1/419905/100/0/threaded
- http://www.securityfocus.com/bid/15933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23870
- http://hamid.ir/security/acidcat.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/18097 Vendor Advisory
- http://www.osvdb.org/21845
- http://www.securityfocus.com/archive/1/419905/100/0/threaded
- http://www.securityfocus.com/bid/15933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23870
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.28%
Top 32% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub