Vulnerabilities > CVE-2005-3407 - Input Validation vulnerability in PHPESP

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2005-11-01

Updated: 2017-07-11

Summary

SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Part	Description	Count
Application	Butterfat Butterfat Phpesp 1.3_Final Butterfat Phpesp 1.4_Beta1 Butterfat Phpesp 1.4_Beta2 Butterfat Phpesp 1.4_Beta3 Butterfat Phpesp 1.4_Final Butterfat Phpesp 1.5_Final Butterfat Phpesp 1.5_Rc1 Butterfat Phpesp 1.5_Rc2 Butterfat Phpesp 1.5_Rc3 Butterfat Phpesp 1.6.1_Final Butterfat Phpesp 1.6_Final Butterfat Phpesp 1.6_Rc1 Butterfat Phpesp 1.6_Rc2 Butterfat Phpesp 1.6_Rc3 Butterfat Phpesp 1.7 Butterfat Phpesp 1.7.1 Butterfat Phpesp 1.7.2 Butterfat Phpesp 1.7.5 Butterfat Phpesp 1.7.5_Dev1 Butterfat Phpesp 1.7.5_Dev2 Butterfat Phpesp 1.7.5_Dev3 Butterfat Phpesp 1.7_Dev Butterfat Phpesp 1.7_Rc1	23