CVE-2005-3879

EPSS 4.0%

Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/26613unverified exploitdbwww.exploit-db.com/exploits/26615unverified exploitdbwww.exploit-db.com/exploits/26616unverified exploitdbwww.exploit-db.com/exploits/26614unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html http://secunia.com/advisories/17555 https://exchange.xforce.ibmcloud.com/vulnerabilities/23208 http://www.osvdb.org/21133 http://www.osvdb.org/21134 http://www.osvdb.org/21135 http://www.osvdb.org/21136 http://www.securityfocus.com/bid/15585 http://www.vupen.com/english/advisories/2005/2617