CVEvulnerability
CVE-2005-4478
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php.
Affected configurations
• papoo papoo (<= 2.1.2)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18152 Vendor Advisory
- http://www.osvdb.org/21869 www.osvdb.org
- http://www.osvdb.org/displayvuln.php?osvdb_id=21870 www.osvdb.org
- http://www.osvdb.org/displayvuln.php?osvdb_id=21871 www.osvdb.org
- http://www.securityfocus.com/bid/16020 Exploit
- http://www.vupen.com/english/advisories/2005/3046 Vendor Advisory
- http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/18152 Vendor Advisory
- http://www.osvdb.org/21869 www.osvdb.org
- http://www.osvdb.org/displayvuln.php?osvdb_id=21870 www.osvdb.org
- http://www.osvdb.org/displayvuln.php?osvdb_id=21871 www.osvdb.org
- http://www.securityfocus.com/bid/16020 Exploit
- http://www.vupen.com/english/advisories/2005/3046 Vendor Advisory