CVE-2005-3553

🗓️ 16 Nov 2005 07:37:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

Multiple SQL injection vulnerabilities in PHPKIT 1.6.1 R2 and earlier

Reporter	Title	Published	Views	Family All 7
Tenable Nessus	PHP-Kit < 1.6.04 Multiple Input Validation Vulnerabilities	22 Nov 200400:00	–	nessus
Tenable Nessus	PHP-Kit Multiple SQL Injection Vulnerabilities	22 Aug 200500:00	–	nessus
Tenable Nessus	PHP-Kit <= 1.6.1 RC2 Multiple Vulnerabilities	22 Nov 200400:00	–	nessus
Cvelist	CVE-2005-3553	16 Nov 200507:37	–	cvelist
EUVD	EUVD-2005-3552	7 Oct 202500:30	–	euvd
NVD	CVE-2005-3553	16 Nov 200507:42	–	nvd
Rapid7 Vulnerability Database (full)	CVE-2005-3553: Improper Neutralization of Special Elements used in an SQL Command	16 Nov 200500:00	–	rapid7

NVD

Node

phpkit phpkitRange≤1.6.1rc2

Source	Link
secunia	www.secunia.com/advisories/17479
securitytracker	www.securitytracker.com/id
securityfocus	www.securityfocus.com/bid/15354
vupen	www.vupen.com/english/advisories/2005/2344
hardened-php	www.hardened-php.net/advisory_212005.80.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23013
osvdb	www.osvdb.org/20560
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23010
cert	www.cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html
osvdb	www.osvdb.org/20561

Parameter	Position	Path	Description	CWE
id	query param	login/userinfo.php	SQL injection vulnerability via id parameter on login/userinfo.php in PHPKIT 1.6.1 R2 and earlier.	CWE-89
PHPKITSID	query param	include.php	SQL injection vulnerability via PHPKITSID session parameter in include.php.	CWE-89

16 Jun 2026 22:17Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.5

EPSS0.01939