CVE

Id
15172  
CVE No.
CVE-2005-3968  
Status
Candidate  
Description
SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.  
Phase
Assigned (20051203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
118491 15172 CVE-2005-3968 BUGTRAQ:20051130 PhpX <= 3.5.9 SQL Injection -> login bypass -> remote command/code execution  View
118492 15172 CVE-2005-3968 URL:http://www.securityfocus.com/archive/1/archive/1/418253/100/0/threaded  View
118493 15172 CVE-2005-3968 MISC:http://rgod.altervista.org/phpx_359_xpl.html  View
118494 15172 CVE-2005-3968 CONFIRM:http://www.phpx.org/news.php?news_id=139  View
118495 15172 CVE-2005-3968 BID:15680  View
118496 15172 CVE-2005-3968 URL:http://www.securityfocus.com/bid/15680  View
118497 15172 CVE-2005-3968 VUPEN:ADV-2005-2696  View
118498 15172 CVE-2005-3968 URL:http://www.vupen.com/english/advisories/2005/2696  View
118499 15172 CVE-2005-3968 OSVDB:21384  View
118500 15172 CVE-2005-3968 URL:http://www.osvdb.org/21384  View
118501 15172 CVE-2005-3968 SECTRACK:1015300  View
118502 15172 CVE-2005-3968 URL:http://securitytracker.com/id?1015300  View
118503 15172 CVE-2005-3968 SECUNIA:17858  View
118504 15172 CVE-2005-3968 URL:http://secunia.com/advisories/17858  View
118505 15172 CVE-2005-3968 XF:phpx-login-sql-injection(23459)  View

Related JVN