NVD

Id
69590  
Name
CVE-2005-3952  
Description
SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-01  
Modified Date
2011-08-05  
Seq
2005-3952  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359714 69590 CVE-2005-3952 http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html  View
359715 69590 CVE-2005-3952 3456  View
359716 69590 CVE-2005-3952 20070421 Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org  View
359717 69590 CVE-2005-3952 20070421 Re: Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org  View
359718 69590 CVE-2005-3952 15547  View
359719 69590 CVE-2005-3952 ADV-2005-2552  View

Related JVN