Back to CVE Browser

CVE-2005-4479

HIGH

7.5

CVSS Severity Score

EPSS Score0.1650%

EPSS Percentile1.89th

PublishedDec 22, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter.

Affected Platforms (CPE)

📦

Phpslash

Phpslash

= 0.8.1

References & Advisories

🔗 http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html

🔗 http://secunia.com/advisories/18150

🔗 http://www.osvdb.org/21873

🔗 http://www.securityfocus.com/bid/16021

🔗 http://www.vupen.com/english/advisories/2005/3044

🔗 http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html

🔗 http://secunia.com/advisories/18150

🔗 http://www.osvdb.org/21873

Related Vulnerabilities

CVE-2005-225710.0

The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying t...

CVE-2009-051710.0

Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code vi...

CVE-2001-13345.0

Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by...

CVE-2005-129910.0

The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.