CVE-2005-3853

HIGH

7.5

CVSS Severity Score

EPSS Score0.1460%

EPSS Percentile22.11th

Published2005年11月27日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

Affected Platforms (CPE)

📦

Solucija

Snews

<= 1.3

📦

Solucija

Snews

= 1.2

References & Advisories

🔗 http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html

🔗 http://secunia.com/advisories/17688

🔗 http://www.osvdb.org/21093

🔗 http://www.vupen.com/english/advisories/2005/2585

🔗 http://pridels0.blogspot.com/2005/11/snews-13-sql-injection.html

🔗 http://secunia.com/advisories/17688

🔗 http://www.osvdb.org/21093

🔗 http://www.vupen.com/english/advisories/2005/2585

Vulnerability Description

Affected Platforms (CPE)

Snews

Snews

References & Advisories

相關漏洞威脅