CVE-2005-4630

critical

Description

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23271

http://www.vupen.com/english/advisories/2005/2628

http://www.clientexec.com/forum/showthread.php?t=8006

http://www.ce-talk.com/showthread.php?t=653

http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html

Details

Source: Mitre, NVD

Published: 2005-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01042

Detections

Analytics