CVE-2005-0368

CVE-2005-0368 describes multiple SQL injection vulnerabilities in CMScore, specifically affecting chipmunk_scripts cmscore. Remote attackers can exploit these flaws by injecting malicious SQL commands through the EntryID or searchterm parameters in index.php, or the username parameter in authenticate.php. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not currently on the KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.