CVE-2005-1454
Last modified
CVE-2005-1454 is a vulnerability of currently unknown severity. SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freeradius | Freeradius | 1.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1454?
How severe is CVE-2005-1454?
How do I fix CVE-2005-1454?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1448Cross-site scripting (XSS) vulnerability in the BBCode plugi…
- CVE-2005-1449Unknown vulnerability in serendipity_config_local.inc.php fo…
- CVE-2005-1450Unknown vulnerability in "the function used to validate path…
- CVE-2005-1451The media manager in Serendipity before 0.8 allows remote at…
- CVE-2005-1452Serendipity before 0.8 allows Chief users to "hide plugins i…
- CVE-2005-1453fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP se…
- CVE-2005-1455Buffer overflow in the sql_escape_func function in the SQL m…
- CVE-2005-1456Multiple unknown vulnerabilities in the (1) DHCP and (2) Tel…
- CVE-2005-1457Multiple unknown vulnerabilities in the (1) AIM, (2) LDAP, (…
- CVE-2005-1458Multiple unknown "other problems" in the KINK dissector in E…
- CVE-2005-1459Multiple unknown vulnerabilities in the (1) WSP, (2) BER, (3…
- CVE-2005-1460Multiple unknown dissectors in Ethereal before 0.10.11 allow…
Are you affected by CVE-2005-1454?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST