Is CVE-2005-1224 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2005-1224, but active exploitation has not been confirmed.

Can CVE-2005-1224 be exploited remotely?

Yes. CVE-2005-1224 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2005-1224?

CVE-2005-1224 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2005-1224

HIGHPOC

CVE-2005-1224

NVD-CWE-OtherPublished: May 2, 2005· Updated: Jun 16, 2026

7.5

CVSS v3.1

Official Description

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.

NVD Source

Technical Analysis

CVE-2005-1224 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2005-1224. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.