CVEvulnerability
CVE-2005-3309
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-10-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php.
Affected configurations
• zomplog zomplog 3.4
References
- http://secunia.com/advisories/17306/ Vendor Advisory
- http://securitytracker.com/alerts/2005/Oct/1015088.html Exploit, Vendor Advisory
- http://www.osvdb.org/20250 www.osvdb.org
- http://www.osvdb.org/20251 www.osvdb.org
- http://www.osvdb.org/20252 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22827 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/17306/ Vendor Advisory
- http://securitytracker.com/alerts/2005/Oct/1015088.html Exploit, Vendor Advisory
- http://www.osvdb.org/20250 www.osvdb.org
- http://www.osvdb.org/20251 www.osvdb.org
- http://www.osvdb.org/20252 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22827 exchange.xforce.ibmcloud.com