CVE-2005-3939
HIGH 7.5EPSS 1.3%
Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 1.29% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2005-12-01
- Updated
- 2024-08-07
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/26681
- https://www.exploit-db.com/exploits/26680
- https://www.exploit-db.com/exploits/26679