CVE-2005-4792

SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Published: Dec 31, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-4792
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
phpwebsite / phpwebsite	-	0.10.1.x
phpwebsite / phpwebsite	0.9.1	0.9.1.x
phpwebsite / phpwebsite	0.9.2	0.9.2.x
phpwebsite / phpwebsite	0.9.3.1	0.9.3.1.x
phpwebsite / phpwebsite	0.9.3.4	0.9.3.4.x
phpwebsite / phpwebsite	0.8.2	0.8.2.x
phpwebsite / phpwebsite	0.9.3.3	0.9.3.3.x
phpwebsite / phpwebsite	0.9.3.2	0.9.3.2.x
phpwebsite / phpwebsite	0.9.3	0.9.3.x
phpwebsite / phpwebsite	0.10	0.10.x
phpwebsite / phpwebsite	0.9.0	0.9.0.x
phpwebsite / phpwebsite	0.8.3	0.8.3.x
phpwebsite / phpwebsite	0.7.3	0.7.3.x

http://www.securityfocus.com/bid/15088

Vulnerability Database

289,697

CVE-2005-4792