CVE-2005-3968

Description

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23459

http://www.vupen.com/english/advisories/2005/2696

http://www.securityfocus.com/archive/1/418253/100/0/threaded

http://www.phpx.org/news.php?news_id=139

http://www.osvdb.org/21384

http://secunia.com/advisories/17858

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS