NVD

Id
69824  
Name
CVE-2005-4226  
Description
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref parameter in download.php, (2) the direction, msg, sforum, reason, subname, and toform parameters in forum.php, (3) the msg and forum parameters in forum_edit.php, (4) the msg and forum parameters in forum_write.php, (5) the tekst parameter in guestbook.php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php. NOTE: the forum.php/forum vector is already identified by CVE-2005-3585.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-14  
Modified Date
2011-03-07  
Seq
2005-4226  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360805 69824 CVE-2005-4226 http://glide.stanford.edu/yichen/research/sec.pdf  View
360806 69824 CVE-2005-4226 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
360807 69824 CVE-2005-4226 20051212 [PHP-CHECKER] 99 potential SQL injection vulnerabilities  View
360808 69824 CVE-2005-4226 ADV-2005-2860  View
360809 69824 CVE-2005-4226 phpwebthings-download-ref-sql-injection(23565)  View

Related JVN