CVE Vulnerabilities

CVE-2005-4792

Published: Dec 31, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

Name Vendor Start Version End Version
Phpwebsite Phpwebsite * 0.10.1 (including)
Phpwebsite Phpwebsite 0.7.3 (including) 0.7.3 (including)
Phpwebsite Phpwebsite 0.8.2 (including) 0.8.2 (including)
Phpwebsite Phpwebsite 0.8.3 (including) 0.8.3 (including)
Phpwebsite Phpwebsite 0.9.0 (including) 0.9.0 (including)
Phpwebsite Phpwebsite 0.9.1 (including) 0.9.1 (including)
Phpwebsite Phpwebsite 0.9.2 (including) 0.9.2 (including)
Phpwebsite Phpwebsite 0.9.3 (including) 0.9.3 (including)
Phpwebsite Phpwebsite 0.9.3.1 (including) 0.9.3.1 (including)
Phpwebsite Phpwebsite 0.9.3.2 (including) 0.9.3.2 (including)
Phpwebsite Phpwebsite 0.9.3.3 (including) 0.9.3.3 (including)
Phpwebsite Phpwebsite 0.9.3.4 (including) 0.9.3.4 (including)
Phpwebsite Phpwebsite 0.10 (including) 0.10 (including)

References