CVE-2005-4198

EPSS 1.3%

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/26826unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/17987 https://exchange.xforce.ibmcloud.com/vulnerabilities/23548 http://www.osvdb.org/21623 http://www.securityfocus.com/bid/15801 http://www.securityfocus.com/bid/15862 http://www.vupen.com/english/advisories/2005/2838