CVE-2005-0841

Description

SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/19787

http://secunia.com/advisories/14642

http://marc.info/?l=bugtraq&m=111143649730845&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS