返回 CVE 浏览器

CVE-2005-4479

HIGH

7.5

CVSS Severity Score

EPSS Score0.1650%

EPSS Percentile1.89th

Published2005年12月22日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter.

Affected Platforms (CPE)

📦

Phpslash

Phpslash

= 0.8.1

References & Advisories

🔗 http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html

🔗 http://secunia.com/advisories/18150

🔗 http://www.osvdb.org/21873

🔗 http://www.securityfocus.com/bid/16021

🔗 http://www.vupen.com/english/advisories/2005/3044

🔗 http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html

🔗 http://secunia.com/advisories/18150

🔗 http://www.osvdb.org/21873

相关漏洞威胁

CVE-2005-225710.0

The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying t...

CVE-2009-051710.0

Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code vi...

CVE-2001-13345.0

Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by...

CVE-2005-266910.0

Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote at...