← Database

CVE-2005-4137

HIGH CVSS: 7.5 Published: 2005-12-09 Modified: 2026-06-16

Description

SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.

Affected Platforms

Fad Solutions Drzes Hms

Weakness Type

NVD-CWE-Other

References