CVE-2005-1413: Envivosoft Envivo CMS

High severity, CVSS 7.5. EPSS: 5.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the (1) username or (2) password parameters to admin_login.asp, or the (3) searchstring and possibly (4) ID parameters to default.asp.

Affected products

• Envivosoft Envivo CMS: version 3.54 only

Published 2005-05-03. Last modified 2026-06-16.