CVE-2005-3884 Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php.
HighCVSS 7.5
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zainu | = 2.0 | No fix listed |
References
- pridels0.blogspot.com
- 17766 third-party-advisory
- 21197 vdb-entry
- 15579 exploit vdb-entry
- ADV-2005-2603 vdb-entry
- zainu-index-sql-injection(23274) vdb-entry