Vulnerabilities > CVE-2005-0841 - SQL Injection vulnerability in PHPmyfamily 1.4

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
phpmyfamily
exploit available
NVD
Published: 2005-05-02
Updated: 2017-07-11

Summary

SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.

Vulnerable Configurations

Part Description Count
Application
Phpmyfamily
1

Exploit-Db

descriptionphpMyFamily <= 1.4.0 Admin Bypass SQL Injection. CVE-2005-0841. Webapps exploit for php platform
idEDB-ID:892
last seen2016-01-31
modified2005-03-21
published2005-03-21
reporterkre0n
sourcehttps://www.exploit-db.com/download/892/
titlephpMyFamily <= 1.4.0 Admin Bypass SQL Injection

References