Unscored severity · published Nov 21, 2005
CVE-2005-3726
SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Articlelive NX · Interspire
0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3726
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3726
osvdb.org
http://osvdb.org/ref/20/20833-articlelive-sql.txt
Patch
http://secunia.com/advisories/17585
www.osvdb.org
http://www.osvdb.org/20833
www.securityfocus.com
http://www.securityfocus.com/bid/15480
www.vupen.com
http://www.vupen.com/english/advisories/2005/2467
More from Articlelive NX
–
CVE-2007-4147
Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to (1) AL_SANITIZE and (2) "Calling the…