CVE-2005-1633

CVE-2005-1633 describes multiple SQL injection vulnerabilities in JGS-XA JGS-Portal versions 3.0.2 and earlier. These flaws allow unauthenticated remote attackers to execute arbitrary SQL commands by manipulating various parameters within several PHP scripts, such as 'anzahl_beitraege' in jgs_portal.php or 'year' in jgs_portal_statistik.php, and even the Accept-Language header. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its low attack complexity and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, multiple proof-of-concept exploits are publicly available on ExploitDB, indicating a clear path for exploitation, though there is no evidence of active exploitation or significant community discussion.