CVE-2005-3968

Description

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23459

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-3963

http://www.vupen.com/english/advisories/2005/2696

http://www.securityfocus.com/bid/15680

http://www.securityfocus.com/archive/1/418253/100/0/threaded

http://www.phpx.org/news.php?news_id=139

http://www.osvdb.org/21384

http://securitytracker.com/id?1015300

http://secunia.com/advisories/17858

http://rgod.altervista.org/phpx_359_xpl.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS