Unscored severity · published Oct 30, 2005
CVE-2005-3363
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in…
–
CVSS
3.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in (1) showcat.php and (2) add.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Saphplesson · Saphp
1.1; 2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3363
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3363
marc.info
http://marc.info/?l=bugtraq&m=113018965520240&w=2
Vendor Advisory
http://secunia.com/advisories/17308/
securityreason.com
http://securityreason.com/securityalert/111
www.attrition.org
http://www.attrition.org/pipermail/vim/2005-October/000313.html
www.osvdb.org
http://www.osvdb.org/20289
www.osvdb.org
http://www.osvdb.org/20290
More from Saphplesson
–
CVE-2006-3161
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter