{"id":"CVE-2005-1804","aliases":["EUVD-2005-1806","GHSA-gjv4-92p5-w8hm"],"status":"published","title":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote...","description":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01236,"percentile":0.69229,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-05-29T04:00:00Z","modified":"2026-06-16T22:13:43Z","exploits":[{"source":"exploitdb","id":"EDB-25748","title":"NPDS 4.8 \u003c 5.0 Glossaire Module - 'terme' SQL Injection","type":"webapps","platform":"php","date":"2005-05-28","verified":true,"url":"https://www.exploit-db.com/exploits/25748"},{"source":"exploitdb","id":"EDB-25749","title":"NPDS 4.8 \u003c 5.0 - 'links.php?Query' SQL Injection","type":"webapps","platform":"php","date":"2005-05-28","verified":true,"url":"https://www.exploit-db.com/exploits/25749"}],"products":[{"vendor":"net_portal_dynamic_system","product":"net_portal_dynamic_system"}],"references":[{"url":"http://securitytracker.com/id?1014073","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.npds.org/download.php?op=geninfo\u0026did=115","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1804"},{"url":"https://github.com/advisories/GHSA-gjv4-92p5-w8hm"}],"sources":{"cve":[{"id":"CVE-2005-1804","description":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.","status":"published","published":"2005-06-01T04:00:00Z","modified":"2024-09-16T16:53:55.346Z","updated_at":"2026-11-02T14:33:39.586409Z"}],"euvd":[{"id":"EUVD-2005-1806","description":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.","status":"published","published":"2005-06-01T04:00:00Z","modified":"2024-09-16T16:53:55Z","updated_at":"2026-11-03T00:55:47.18954Z"}],"ghsa":[{"id":"GHSA-gjv4-92p5-w8hm","title":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote...","description":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.","status":"published","published":"2022-05-01T02:02:04Z","modified":"2023-01-30T05:07:40Z","updated_at":"2026-11-02T14:47:44.045825Z"}],"nvd":[{"id":"CVE-2005-1804","description":"Multiple SQL injection vulnerabilities in Net Portal Dynamic System (NPDS) 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) terme parameter in the glossaire module (glossaire.php) or (2) query parameter to links.php.","status":"published","published":"2005-05-29T04:00:00Z","modified":"2026-06-16T22:13:43.267Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.600202Z"}]}}