CVE-2005-3968

Опубликовано: 03 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.

Ссылки

http://rgod.altervista.org/phpx_359_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/17858
Patch
Vendor Advisory
http://securitytracker.com/id?1015300
Exploit
http://www.osvdb.org/21384
http://www.phpx.org/news.php?news_id=139
Patch
URL Repurposed
http://www.securityfocus.com/archive/1/418253/100/0/threaded
http://www.securityfocus.com/bid/15680
Exploit
http://www.vupen.com/english/advisories/2005/2696
https://exchange.xforce.ibmcloud.com/vulnerabilities/23459
http://rgod.altervista.org/phpx_359_xpl.html
Exploit
Vendor Advisory
http://secunia.com/advisories/17858
Patch
Vendor Advisory
http://securitytracker.com/id?1015300
Exploit
http://www.osvdb.org/21384
http://www.phpx.org/news.php?news_id=139
Patch
URL Repurposed
http://www.securityfocus.com/archive/1/418253/100/0/threaded
http://www.securityfocus.com/bid/15680
Exploit
http://www.vupen.com/english/advisories/2005/2696
https://exchange.xforce.ibmcloud.com/vulnerabilities/23459

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpx:phpx:3.5:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.8:*:*:*:*:*:*:*

cpe:2.3:a:phpx:phpx:3.5.9:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03088

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-3q9q-hxxg-xhhm

github

почти 4 года назад