Vulnerabilities > CVE-2005-4001 - SQL Injection vulnerability in PHPYellowTM

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
phpyellow
exploit available
NVD
Published: 2005-12-05
Updated: 2011-03-08

Summary

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php.

Vulnerable Configurations

Part Description Count
Application
Phpyellow
2

Exploit-Db

  • descriptionphpYellowTM 5.33 print_me.php ckey Parameter SQL Injection. CVE-2005-4001. Webapps exploit for php platform
    idEDB-ID:26714
    last seen2016-02-03
    modified2005-12-03
    published2005-12-03
    reporterr0t3d3Vil
    sourcehttps://www.exploit-db.com/download/26714/
    titlephpYellowTM 5.33 print_me.php ckey Parameter SQL Injection
  • descriptionphpYellowTM 5.33 search_result.php haystack Parameter SQL Injection. CVE-2005-4001 . Webapps exploit for php platform
    idEDB-ID:26713
    last seen2016-02-03
    modified2005-12-03
    published2005-12-03
    reporterr0t3d3Vil
    sourcehttps://www.exploit-db.com/download/26713/
    titlephpYellowTM 5.33 - search_result.php haystack Parameter SQL Injection

References