CVE-2005-3309

Exploit

EPSS 0.96%
Published 26.10.2005 01:02:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Zomplog ≫ Zomplog Version3.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.96%	0.744

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/17306/

Vendor Advisory

http://securitytracker.com/alerts/2005/Oct/1015088.html

Vendor Advisory

Exploit

http://www.osvdb.org/20250

http://www.osvdb.org/20251

http://www.osvdb.org/20252

https://exchange.xforce.ibmcloud.com/vulnerabilities/22827

https://nvd.nist.gov/vuln/detail/CVE-2005-3309

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3309

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3309

EUVD