Approved changes feed: RSS · Atom

cpe:2.3:a:quantum_art:qp7_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuantum Art (bdedbccd-7508-5fb5-93eb-86cc21fc36f1)
ProductQp7 Enterprise (2fd4705c-c930-5423-9e04-a0dc30ea3aee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4486 vulnerable 2026-06-08 04:48:43.988081 Details available
SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_news_id parameter to (1) news_and_events_new.asp and (2) news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the p_news_id, news_and_events_new.asp, and news.asp are not specifically part of their product, although they could be dynamically generated through use of the product. Some investigation by CVE suggests evidence that the news_and_events_new.asp page has at least a forced invalid SQL syntax error, but this could not be repeated for news.asp
Published: 2005-12-22T11:00:00.000Z
Updated: 2024-08-07T23:46:05.487Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.