CVE-2005-3879 Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res....
HighCVSS 7.5
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softbizscripts resource repository script | = 1.1 | No fix listed |
References
- pridels0.blogspot.com broken-link
- 17555 exploit third-party-advisory vendor-advisory
- 21133 broken-link vdb-entry
- 21134 broken-link vdb-entry
- 21135 broken-link vdb-entry
- 21136 broken-link vdb-entry
- 15585 exploit vdb-entry
- ADV-2005-2617 not-applicable vdb-entry
- softbiz-whds-multiple-sql-injection(23208) third-party-advisory vdb-entry