Unscored severity · published Nov 1, 2005
CVE-2005-3395
SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter
–
CVSS
2.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Invision Gallery · Invision Power Services
2.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3395
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3395
Patch
http://secunia.com/advisories/17375
www.osvdb.org
http://www.osvdb.org/20419
www.securityfocus.com
http://www.securityfocus.com/archive/1/415297
Exploit
http://www.securityfocus.com/bid/15240
www.vupen.com
http://www.vupen.com/english/advisories/2005/2257
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/22928
More from Invision Gallery
–
CVE-2008-0421
SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command
–
CVE-2006-6370
SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to cause a denial of service and possibly have other impacts, as…
–
CVE-2006-5205
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a
–
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php,…
–
CVE-2006-2202
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter