CVEvulnerability
CVE-2005-4656
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
Affected configurations
• triggertg tclanportal 1.1.3
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl Exploit
- http://secunia.com/advisories/17324 Vendor Advisory
- http://www.osvdb.org/20305 www.osvdb.org
- http://www.securityfocus.com/bid/15173 Exploit
- http://www.vupen.com/english/advisories/2005/2187 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22869 exchange.xforce.ibmcloud.com
- http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl Exploit
- http://secunia.com/advisories/17324 Vendor Advisory
- http://www.osvdb.org/20305 www.osvdb.org
- http://www.securityfocus.com/bid/15173 Exploit
- http://www.vupen.com/english/advisories/2005/2187 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22869 exchange.xforce.ibmcloud.com