CVE-2005-3315

Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.

• http://cirt.dk/advisories/cirt-39-advisory.pdfExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/17358Patch, Vendor Advisory
• http://securityreason.com/securityalert/124
• http://securitytracker.com/id?1015116
• http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htmPatch
• http://www.kb.cert.org/vuls/id/536300US Government Resource
• http://www.osvdb.org/20362
• http://www.osvdb.org/20363
• http://www.securityfocus.com/archive/1/414880
• http://www.securityfocus.com/bid/15220
• http://www.vupen.com/english/advisories/2005/2238
• http://cirt.dk/advisories/cirt-39-advisory.pdfExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/17358Patch, Vendor Advisory
• http://securityreason.com/securityalert/124
• http://securitytracker.com/id?1015116
• http://support.novell.com/cgi-bin/search/searchtid.cgi?10099318.htmPatch
• http://www.kb.cert.org/vuls/id/536300US Government Resource
• http://www.osvdb.org/20362
• http://www.osvdb.org/20363
• http://www.securityfocus.com/archive/1/414880
• http://www.securityfocus.com/bid/15220
• http://www.vupen.com/english/advisories/2005/2238

Published

Oct 30, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3309Multiple SQL injection vulnerabilities in Zomplog 3.4 allow …
• CVE-2005-3310Interpretation conflict in phpBB 2.0.17, with remote avatars…
• CVE-2005-3311BMC Software Control-M 6.1.03 for Solaris, and possibly othe…
• CVE-2005-3312The HTML rendering engine in Microsoft Internet Explorer 6.0…
• CVE-2005-3313The IRC protocol dissector in Ethereal 0.10.13 allows remote…
• CVE-2005-3314Stack-based buffer overflow in the IMAP daemon in Novell Net…
• CVE-2005-3316The installation of ON Symantec Discovery 4.5.x and Symantec…
• CVE-2005-3317Multiple stack-based buffer overflows in ZipGenius 5.5.1.468…
• CVE-2005-3318Buffer overflow in the _chm_decompress_block function in CHM…
• CVE-2005-3319The apache2handler SAPI (sapi_apache2.c) in the Apache modul…
• CVE-2005-3320Cross-site scripting (XSS) vulnerability in SiteTurn Domain …
• CVE-2005-3321chkstat in SuSE Linux 9.0 through 10.0 allows local users to…