CVE-2005-4169

🗓️ 11 Dec 2005 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

CVE-2005-4169: SQL injection in eFiction 1.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2005-4169	11 Dec 200521:00	–	cvelist
Exploit DB	efiction 1.0/1.1/2.0 - 'sid' SQL Injection	25 Nov 200500:00	–	exploitdb
Tenable Nessus	eFiction < 2.0.2 Multiple Remote Vulnerabilities (SQLi, XSS, Disc)	29 Dec 200500:00	–	nessus
EUVD	EUVD-2005-4164	7 Oct 202500:30	–	euvd
NVD	CVE-2005-4169	11 Dec 200521:03	–	nvd

NVD

Node

efiction_project efictionMatch1.0

Source	Link
osvdb	www.osvdb.org/21119
archives	www.archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
osvdb	www.osvdb.org/21121
vupen	www.vupen.com/english/advisories/2005/2606
securityfocus	www.securityfocus.com/bid/15568
securitytracker	www.securitytracker.com/id
efiction	www.efiction.wallflowergirl.com/forums/viewtopic.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/23373
secunia	www.secunia.com/advisories/17777
rgod	www.rgod.altervista.org/efiction2_xpl.html

Parameter	Position	Path	Description	CWE
let	query param	path/authors.php	SQL injection via let parameter in authors.php viewlist action	CWE-89
sid	query param	path/viewstory.php	SQL injection via sid parameter in viewstory.php	CWE-89

16 Jun 2026 22:18Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

EPSS0.02178

cve-2005-4169 sql injection efiction 1.0 security vulnerability