CVE-2005-3920

EPSS 1.2%

SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal parameter to index.php or (2) id parameter to comments.php.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/26606unverified exploitdbwww.exploit-db.com/exploits/26605unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html http://secunia.com/advisories/17767 http://www.osvdb.org/21205 http://www.osvdb.org/21206 http://www.securityfocus.com/bid/15580