CVE-2005-3853

SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category parameters to index.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.12% chance of exploitation in the next 30 days, 64th percentile

Published

2005-11-27

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27216

References

• CVE Record
• NVD entry

Related

• CVE-2005-3849
• CVE-2005-3855
• CVE-2005-3846
• CVE-2005-3857
• CVE-2005-3845
• CVE-2005-3859