Vulnerability Details CVE-2005-4586
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/18167
- http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605
- http://www.osvdb.org/22039
- http://www.osvdb.org/22184
- http://www.phpsurveyor.org/mantis/view.php?id=286
- http://www.phpsurveyor.org/mantis/view.php?id=287
- http://www.securityfocus.com/bid/16077
- http://secunia.com/advisories/18167
- http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605
- http://www.osvdb.org/22039
- http://www.osvdb.org/22184
- http://www.phpsurveyor.org/mantis/view.php?id=286
- http://www.phpsurveyor.org/mantis/view.php?id=287
- http://www.securityfocus.com/bid/16077
Products affected by CVE-2005-4586
-
cpe:2.3:a:phpsurveyor:phpsurveyor:0.99