CVE-2005-3236

Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/15047
http://secunia.com/advisories/17104/
http://securitytracker.com/id?1015020
http://www.osvdb.org/19943
http://www.osvdb.org/19944
http://www.osvdb.org/19945
http://securityreason.com/securityalert/70
http://marc.info/?l=bugtraq&m=112879353805769&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/22552

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*

Information

Published : 2005-10-14 03:02

Updated : 2017-07-10 18:33

NVD link : CVE-2005-3236

Mitre link : CVE-2005-3236

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

cynox

cyphor

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/15047", "name": "15047", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/17104/", "name": "17104", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1015020", "name": "1015020", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.osvdb.org/19943", "name": "19943", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/19944", "name": "19944", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/19945", "name": "19945", "tags": [], "refsource": "OSVDB"}, {"url": "http://securityreason.com/securityalert/70", "name": "70", "tags": [], "refsource": "SREASON"}, {"url": "http://marc.info/?l=bugtraq&m=112879353805769&w=2", "name": "20051008 Cyphor 0.19 SQL Injection / Board takeover / cross site scripting", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22552", "name": "cyphor-lostpwd-newmsg-sql-injection(22552)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-3236", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2005-10-14T10:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:cynox:cyphor:0.19:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:33Z"}