← back
CVE-2005-3325

CVE-2005-3325

EPSS 2.6%
Multiple SQL injection vulnerabilities in (1) acid_qry_main.php in Analysis Console for Intrusion Databases (ACID) 0.9.6b20 and (2) base_qry_main.php in Basic Analysis and Security Engine (BASE) 1.2, and unspecified other console scripts in these products, allow remote attackers to execute arbitrary SQL commands via the sig[1] parameter and possibly other parameters.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26395unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=336788http://secunia.com/advisories/17314http://secunia.com/advisories/17523http://secunia.com/advisories/17552http://secunia.com/advisories/17558http://www.debian.org/security/2005/dsa-893http://www.osvdb.org/20836http://www.osvdb.org/20837http://www.securityfocus.com/bid/15199http://www.vupen.com/english/advisories/2005/2188