Vulnerabilities > CVE-2005-3575 - Unspecified vulnerability in Cynox Cyphor
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN cynox
exploit available
Summary
SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description Cyphor <= 0.19 (board takeover) SQL Injection Exploit. CVE-2005-3575. Webapps exploit for php platform id EDB-ID:1241 last seen 2016-01-31 modified 2005-10-08 published 2005-10-08 reporter rgod source https://www.exploit-db.com/download/1241/ title Cyphor <= 0.19 board takeover SQL Injection Exploit description Cyphor 0.19 (show.php id) Remote SQL Injection Exploit. CVE-2005-3575. Webapps exploit for php platform id EDB-ID:1321 last seen 2016-01-31 modified 2005-11-14 published 2005-11-14 reporter HACKERS PAL source https://www.exploit-db.com/download/1321/ title Cyphor 0.19 show.php id Remote SQL Injection Exploit
References
- http://securityreason.com/securityalert/180
- http://securityreason.com/securityalert/180
- http://www.osvdb.org/20983
- http://www.osvdb.org/20983
- http://www.securiteam.com/unixfocus/6P00F1FEKC.html
- http://www.securiteam.com/unixfocus/6P00F1FEKC.html
- http://www.securityfocus.com/archive/1/416562
- http://www.securityfocus.com/archive/1/416562
- http://www.securityfocus.com/bid/15418
- http://www.securityfocus.com/bid/15418
- http://www.vupen.com/english/advisories/2005/2420
- http://www.vupen.com/english/advisories/2005/2420