CVE-2005-4586 - Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute

CVE-2005-4586

Summary

Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.

References

http://secunia.com/advisories/18167
http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605
http://www.osvdb.org/22039
http://www.osvdb.org/22184
http://www.phpsurveyor.org/mantis/view.php?id=286
http://www.phpsurveyor.org/mantis/view.php?id=287
http://www.securityfocus.com/bid/16077

Vulnerable Configurations

cpe:2.3:a:phpsurveyor:phpsurveyor:0.99:*:*:*:*:*:*:*
cpe:2.3:a:phpsurveyor:phpsurveyor:0.99:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 05-09-2008 - 20:57)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	16077
confirm	http://sourceforge.net/project/shownotes.php?release_id=381050&group_id=74605 http://www.phpsurveyor.org/mantis/view.php?id=286 http://www.phpsurveyor.org/mantis/view.php?id=287
osvdb	22039 22184
secunia	18167

Last major update

05-09-2008 - 20:57

Published

30-12-2005 - 11:03

Last modified

05-09-2008 - 20:57