Search
Find a vulnerability
Search criteria
4 vulnerabilities by phpsurveyor
CVE-2006-2065 (GCVE-0-2006-2065)
Vulnerability from nvd – Published: 2006-04-27 10:00 – Updated: 2024-08-07 17:35
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey['language'] variable.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/17633 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/431508/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/19761 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1015970 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://retrogod.altervista.org/phpsurveyor_0995_x… | x_refsource_MISC |
| http://www.osvdb.org/24787 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/1451 | vdb-entryx_refsource_VUPEN |
Date Public
2006-04-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:35:31.130Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "17633",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-04-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey[\u0027language\u0027] variable."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "17633",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-2065",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey[\u0027language\u0027] variable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "17633",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"name": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html",
"refsource": "MISC",
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-2065",
"datePublished": "2006-04-27T10:00:00.000Z",
"dateReserved": "2006-04-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:35:31.130Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-4586 (GCVE-0-2005-4586)
Vulnerability from nvd – Published: 2005-12-30 11:00 – Updated: 2024-08-07 23:53
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/22184 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/18167 | third-party-advisoryx_refsource_SECUNIA |
| http://www.phpsurveyor.org/mantis/view.php?id=287 | x_refsource_CONFIRM |
| http://www.phpsurveyor.org/mantis/view.php?id=286 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/16077 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22039 | vdb-entryx_refsource_OSVDB |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
Date Public
2005-12-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:53:28.398Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "22184",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18167"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22039"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-12-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2006-01-11T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "22184",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18167"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22039"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-4586",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "22184",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18167"
},
{
"name": "http://www.phpsurveyor.org/mantis/view.php?id=287",
"refsource": "CONFIRM",
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"name": "http://www.phpsurveyor.org/mantis/view.php?id=286",
"refsource": "CONFIRM",
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22039"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-4586",
"datePublished": "2005-12-30T11:00:00.000Z",
"dateReserved": "2005-12-30T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:53:28.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-2065 (GCVE-0-2006-2065)
Vulnerability from cvelistv5 – Published: 2006-04-27 10:00 – Updated: 2024-08-07 17:35
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey['language'] variable.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/17633 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/431508/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/19761 | third-party-advisoryx_refsource_SECUNIA |
| http://securitytracker.com/id?1015970 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://retrogod.altervista.org/phpsurveyor_0995_x… | x_refsource_MISC |
| http://www.osvdb.org/24787 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/1451 | vdb-entryx_refsource_VUPEN |
Date Public
2006-04-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:35:31.130Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "17633",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-04-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey[\u0027language\u0027] variable."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "17633",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-2065",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. NOTE: this issue could be leveraged to execute arbitrary PHP code, as demonstrated by inserting directory traversal sequences into the database, which are then processed by the thissurvey[\u0027language\u0027] variable."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "17633",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17633"
},
{
"name": "20060420 PHPSurveyor \u003c= 0.995 \u0027save.php/surveyid\u0027 remote cmmnds xctn",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/431508/100/0/threaded"
},
{
"name": "19761",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19761"
},
{
"name": "1015970",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015970"
},
{
"name": "phpsurveyor-surveyid-shell-execution(25970)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25970"
},
{
"name": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html",
"refsource": "MISC",
"url": "http://retrogod.altervista.org/phpsurveyor_0995_xpl.html"
},
{
"name": "24787",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/24787"
},
{
"name": "ADV-2006-1451",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/1451"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-2065",
"datePublished": "2006-04-27T10:00:00.000Z",
"dateReserved": "2006-04-26T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:35:31.130Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2005-4586 (GCVE-0-2005-4586)
Vulnerability from cvelistv5 – Published: 2005-12-30 11:00 – Updated: 2024-08-07 23:53
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
7 references
| URL | Tags |
|---|---|
| http://www.osvdb.org/22184 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/18167 | third-party-advisoryx_refsource_SECUNIA |
| http://www.phpsurveyor.org/mantis/view.php?id=287 | x_refsource_CONFIRM |
| http://www.phpsurveyor.org/mantis/view.php?id=286 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/16077 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22039 | vdb-entryx_refsource_OSVDB |
| http://sourceforge.net/project/shownotes.php?rele… | x_refsource_CONFIRM |
Date Public
2005-12-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T23:53:28.398Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "22184",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18167"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22039"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2005-12-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2006-01-11T10:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "22184",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18167"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22039"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2005-4586",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, and (5) token parameters in certain PHP scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "22184",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22184"
},
{
"name": "18167",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18167"
},
{
"name": "http://www.phpsurveyor.org/mantis/view.php?id=287",
"refsource": "CONFIRM",
"url": "http://www.phpsurveyor.org/mantis/view.php?id=287"
},
{
"name": "http://www.phpsurveyor.org/mantis/view.php?id=286",
"refsource": "CONFIRM",
"url": "http://www.phpsurveyor.org/mantis/view.php?id=286"
},
{
"name": "16077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16077"
},
{
"name": "22039",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22039"
},
{
"name": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605",
"refsource": "CONFIRM",
"url": "http://sourceforge.net/project/shownotes.php?release_id=381050\u0026group_id=74605"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2005-4586",
"datePublished": "2005-12-30T11:00:00.000Z",
"dateReserved": "2005-12-30T00:00:00.000Z",
"dateUpdated": "2024-08-07T23:53:28.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}