Unscored CVE-2005-4137 EUVD-2005-4132GHSA-4jh2-4rxm-r2jw

SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID…

Published Dec 9, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.

References

15766 vdb-entry
21180 vdb-entry
1015334 vdb-entry
17755 third-party-advisory
drzes-multiple-scripts-sql-injection(23264) vdb-entry
ADV-2005-2633 vdb-entry
20051207 DRZES HMS XSS and SQL Injection Vulnerabilities mailing-list