CVEvulnerability
CVE-2005-4056
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters.
Affected configurations
• jonathan beckett pluggedout nexus 0.1
References
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html pridels0.blogspot.com
- http://secunia.com/advisories/17909 secunia.com
- http://www.osvdb.org/21478 www.osvdb.org
- http://www.securityfocus.com/bid/15724 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2751 www.vupen.com
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html pridels0.blogspot.com
- http://secunia.com/advisories/17909 secunia.com
- http://www.osvdb.org/21478 www.osvdb.org
- http://www.securityfocus.com/bid/15724 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2751 www.vupen.com