CVE-2005-0292 Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via th...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php gift registry phpgiftreg | = 1.4 | No fix listed |
References
- 20050116 phpGiftReq SQL Injection exploit mailing-list vendor-advisory
- 20050116 phpGiftReq SQL Injection mailing-list
- 13873 third-party-advisory vendor-advisory
- 1012910 vdb-entry
- 20050307 Re: phpGiftReq SQL Injection mailing-list patch vendor-advisory
- 12289 patch vdb-entry vendor-advisory
- phpgiftregistry-sql-injection(18925) vdb-entry