CVE-2005-3553

🗓️ 16 Nov 2005 07:37:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

Multiple SQL injection vulnerabilities in PHPKIT 1.6.1 R2 and earlier

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	PHP-Kit < 1.6.04 Multiple Input Validation Vulnerabilities	22 Nov 200400:00	–	nessus
Tenable Nessus	PHP-Kit Multiple SQL Injection Vulnerabilities	22 Aug 200500:00	–	nessus
Tenable Nessus	PHP-Kit <= 1.6.1 RC2 Multiple Vulnerabilities	22 Nov 200400:00	–	nessus
Cvelist	CVE-2005-3553	16 Nov 200507:37	–	cvelist
EUVD	EUVD-2005-3552	7 Oct 202500:30	–	euvd
NVD	CVE-2005-3553	16 Nov 200507:42	–	nvd

NVD

Node

phpkit phpkitRange≤1.6.1rc2

Source	Link
secunia	www.secunia.com/advisories/17479
securitytracker	www.securitytracker.com/id
securityfocus	www.securityfocus.com/bid/15354
vupen	www.vupen.com/english/advisories/2005/2344
hardened-php	www.hardened-php.net/advisory_212005.80.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23013
osvdb	www.osvdb.org/20560
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23010
cert	www.cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html
osvdb	www.osvdb.org/20561

Parameter	Position	Path	Description	CWE
id	query param	login/userinfo.php	SQL injection via id parameter in login/userinfo.php	CWE-89
PHPKITSID	header	include.php	SQL injection via session parameter (PHPKITSID) in include.php	CWE-89

16 Apr 2026 00:27Current

8.6High risk

Vulners AI Score8.6

CVSS 27.5

EPSS0.01887