CVE-2005-3968
Published Dec 3, 2005
Last updated 9 months ago
Overview
- Description
- SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6920B22-6513-40CB-889F-49DD4320A01A"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9152611F-670A-4F41-95C2-69E9F1C13AF4"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7400174A-2A9F-4B36-8CBC-7B1AC1F7EDE9"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61B92D8E-0351-432F-AC3B-F1F73EBD0685"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02B1B34D-69AD-4044-9486-AD41FAFBC57D"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE95A552-0F5A-4B12-A3E6-FC323EF864E4"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC5F7A5D-3AC5-4247-A340-17B494BD7528"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26764F66-72A4-464B-BB6D-1845600A201C"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11223891-4506-4653-A424-E3EACEB02273"
},
{
"criteria": "cpe:2.3:a:phpx:phpx:3.5.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB7184BC-839D-4474-BABD-E47ECE1DFB25"
}
],
"operator": "OR"
}
]
}
]