← volver
CVE-2005-3363

CVE-2005-3363

EPSS 3.5%
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/26390no verificadocve_referencewww.exploit-db.com/exploits/1530no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://marc.info/?l=bugtraq&m=113018965520240&w=2http://secunia.com/advisories/17308/http://securityreason.com/securityalert/111https://exchange.xforce.ibmcloud.com/vulnerabilities/22861https://exchange.xforce.ibmcloud.com/vulnerabilities/27746https://www.exploit-db.com/exploits/1530http://www.attrition.org/pipermail/vim/2005-October/000313.htmlhttp://www.osvdb.org/20289http://www.osvdb.org/20290http://www.securityfocus.com/archive/1/430906/30/5610/threadedhttp://www.securityfocus.com/archive/1/440120/100/0/threadedhttp://www.securityfocus.com/archive/1/472799/100/0/threaded