CVE-2005-3817 Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2)...
HighCVSS 7.5
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softbizscripts web hosting directory script | <= 1.1 | No fix listed |
References
- pridels0.blogspot.com broken-link
- 17724 third-party-advisory
- 21079 broken-link vdb-entry
- 21080 broken-link vdb-entry
- 21081 broken-link vdb-entry
- 21082 broken-link vdb-entry
- 21083 broken-link vdb-entry
- 15561 broken-link vdb-entry
- ADV-2005-2557 vdb-entry vendor-advisory
- softbiz-whds-multiple-sql-injection(23208) third-party-advisory vdb-entry