CVE-2005-3868

EPSS 1.3%

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id, (3) stat, and (4) source parameters to index.php, and (5) through the image parameters with an add request.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/13993unverified exploitdbwww.exploit-db.com/exploits/13993unverified exploitdbwww.exploit-db.com/exploits/26619unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html http://secunia.com/advisories/17719 http://www.exploit-db.com/exploits/13993 http://www.osvdb.org/21127 http://www.securityfocus.com/bid/15588 http://www.vupen.com/english/advisories/2005/2616