CVE-2005-3968

2005-12-0319:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.3%

JSON

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.

References

rgod.altervista.org/phpx_359_xpl.html

secunia.com/advisories/17858

securitytracker.com/id?1015300

www.osvdb.org/21384

www.phpx.org/news.php?news_id=139

www.securityfocus.com/archive/1/418253/100/0/threaded

www.securityfocus.com/bid/15680

www.vupen.com/english/advisories/2005/2696

exchange.xforce.ibmcloud.com/vulnerabilities/23459