Unscored severity · published May 2, 2005
CVE-2005-0841
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0…
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmyfamily · Phpmyfamily
1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0841
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0841
marc.info
http://marc.info/?l=bugtraq&m=111143649730845&w=2
Patch
http://secunia.com/advisories/14642
Exploit
http://securitytracker.com/id?1013493
Exploit
http://www.securityfocus.com/bid/12860
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19787
More from Phpmyfamily
–
CVE-2006-1425
Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter