high7.5
CVE-2005-3407
SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Impact
SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Butterfat | Phpesp | Versions 1.3_final, 1.4_beta1, 1.4_beta2, 1.4_beta3, 1.4_final, 1.5_final |
References
- NVD record
- CVE.org record
- http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain
- http://secunia.com/advisories/17333
- http://www.osvdb.org/20358
- http://www.securityfocus.com/bid/15232
- http://www.vupen.com/english/advisories/2005/2237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22905
- http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain
- http://secunia.com/advisories/17333
- http://www.osvdb.org/20358
- http://www.securityfocus.com/bid/15232
- http://www.vupen.com/english/advisories/2005/2237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22905