CVE

Id
14703  
CVE No.
CVE-2005-3497  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter. NOTE: on 20060210, the vendor disputed this issue, saying "this is 100% false reporting, this is a slander campaign from a customer who had a vulnerability in his SERVER not the software." However, followup investigation strongly suggests that the original report is correct.  
Phase
Assigned (20051103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
112362 14703 CVE-2005-3497 MISC:http://www.zone-h.org/advisories/read/id=8360  View
112363 14703 CVE-2005-3497 BID:15298  View
112364 14703 CVE-2005-3497 URL:http://www.securityfocus.com/bid/15298  View
112365 14703 CVE-2005-3497 VUPEN:ADV-2005-2292  View
112366 14703 CVE-2005-3497 URL:http://www.vupen.com/english/advisories/2005/2292  View
112367 14703 CVE-2005-3497 OSVDB:20481  View
112368 14703 CVE-2005-3497 URL:http://www.osvdb.org/20481  View
112369 14703 CVE-2005-3497 SECUNIA:17412  View

Related JVN