CVE-2005-2468: mysql eventum
Vulnerability summary
CVE-2005-2468 is a medium (CVSS 6.4) vulnerability in mysql eventum. EPSS estimates a 2.04% chance of exploitation in the next 30 days, higher than 80.8% of scored vulnerabilities. 8 public exploits are recorded.
Timeline
- 06-06-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5) custom_fields_graph.php, or (6) class.report.php, or the insert function in (7) releases.php or (8) class.release.php.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.04%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.04% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
8 foundExploit Reference (osvdb.org)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
Show all 8 exploits
Exploit Reference (securitytracker.com)
Maturity: unknown
Exploit Reference (gulftech.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (osvdb.org)
Maturity: unknown
MySQL Eventum 1.5.5 - 'login.php' SQL Injection
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mysql1 product
- eventum1.1 | 1.2 | 1.2.2 | 1.3 | 1.3.1 | 1.4 | 1.5.4 | 1.5.5
1 vendor · 1 product