Lucene search
HistoryOct 14, 2005 - 10:02 a.m.
CVE-2005-3236
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.006
Percentile
78.3%
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.
Affected configurations
Node
cynoxcyphorMatch0.19
Related
exploitdb
exploitdb
Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
2005-10-08 00:00:00
Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
2005-10-08 00:00:00
cve
cve
CVE-2005-3236
2005-10-14 10:02:00
cvelist
cvelist
CVE-2005-3236
2005-10-14 04:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.006
Percentile
78.3%
Related for NVD:CVE-2005-3236