CVE-2005-4586

Description

Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.

References

http://www.securityfocus.com/bid/16077

http://www.phpsurveyor.org/mantis/view.php?id=287

http://www.phpsurveyor.org/mantis/view.php?id=286

http://www.osvdb.org/22184

http://www.osvdb.org/22039

http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605

http://secunia.com/advisories/18167

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS