CVE-2005-3844 SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3...
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3) the ctg parameter in an archive action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpwordpress php news and article manager | = 3.0 | No fix listed |
References
- forum.word-press.net
- pridels0.blogspot.com
- 17733 third-party-advisory vendor-advisory
- 21110 vdb-entry
- 15582 vdb-entry
- ADV-2005-2594 vdb-entry