CVE-2005-4263: Envolution

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.

Affected products

• Envolution Envolution: any version

Published 2005-12-15. Last modified 2026-06-16.