Vulnerabilities > CVE-2005-4034 - SQL Injection vulnerability in Web4Future Edating Professional 5

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
web4future
exploit available
NVD
Published: 2005-12-06
Updated: 2011-03-08

Summary

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; (4) cid parameter to (b) gift.php and (c) fq.php; and (5) cat parameter to (d) articles.php.

Vulnerable Configurations

Part Description Count
Application
Web4Future
1

Exploit-Db

  • descriptionWeb4Future eDating Professional 5.0 articles.php cat Parameter SQL Injection. CVE-2005-4034. Webapps exploit for php platform
    idEDB-ID:26726
    last seen2016-02-03
    modified2005-12-05
    published2005-12-05
    reporterr0t
    sourcehttps://www.exploit-db.com/download/26726/
    titleWeb4Future eDating Professional 5.0 articles.php cat Parameter SQL Injection
  • descriptionWeb4Future eDating Professional 5.0 fq.php cid Parameter SQL Injection. CVE-2005-4034. Webapps exploit for php platform
    idEDB-ID:26727
    last seen2016-02-03
    modified2005-12-05
    published2005-12-05
    reporterr0t
    sourcehttps://www.exploit-db.com/download/26727/
    titleWeb4Future eDating Professional 5.0 fq.php cid Parameter SQL Injection
  • descriptionWeb4Future eDating Professional 5.0 index.php Multiple Parameter SQL Injection. CVE-2005-4034. Webapps exploit for php platform
    idEDB-ID:26724
    last seen2016-02-03
    modified2005-12-05
    published2005-12-05
    reporterr0t
    sourcehttps://www.exploit-db.com/download/26724/
    titleWeb4Future eDating Professional 5.0 index.php Multiple Parameter SQL Injection
  • descriptionWeb4Future eDating Professional 5.0 gift.php cid Parameter SQL Injection. CVE-2005-4034. Webapps exploit for php platform
    idEDB-ID:26725
    last seen2016-02-03
    modified2005-12-05
    published2005-12-05
    reporterr0t
    sourcehttps://www.exploit-db.com/download/26725/
    titleWeb4Future eDating Professional 5.0 gift.php cid Parameter SQL Injection

References