CVE-2005-4226

N/A Unknown
Published: December 14, 2005 Modified: April 16, 2026
View on NVD

Description

Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref parameter in download.php, (2) the direction, msg, sforum, reason, subname, and toform parameters in forum.php, (3) the msg and forum parameters in forum_edit.php, (4) the msg and forum parameters in forum_write.php, (5) the tekst parameter in guestbook.php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php. NOTE: the forum.php/forum vector is already identified by CVE-2005-3585.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://glide.stanford.edu/yichen/research/sec.pdf
Source: cve@mitre.org
http://secunia.com/advisories/18011/
Source: cve@mitre.org
Vendor Advisory
http://www.osvdb.org/21650
Source: cve@mitre.org
http://www.osvdb.org/21651
Source: cve@mitre.org
http://www.osvdb.org/21652
Source: cve@mitre.org
http://www.osvdb.org/21653
Source: cve@mitre.org
http://www.osvdb.org/21654
Source: cve@mitre.org
http://www.osvdb.org/21655
Source: cve@mitre.org
http://www.osvdb.org/21656
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/419280/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/419487/100/0/threaded
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2005/2860
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/23565
Source: cve@mitre.org
http://glide.stanford.edu/yichen/research/sec.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/18011/
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.osvdb.org/21650
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21651
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21652
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21653
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21654
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21655
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/21656
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/419280/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/419487/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2005/2860
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/23565
Source: af854a3a-2127-422b-91ae-364da2661108

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.3%
85th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

phpwebthings