CVE-2005-3817

HOCH 7.5CVE-2005-3817 · Published 26/11/2005 · updated 16/06/2026

Kurz gesagt

CVE-2005-3817 ist eine Schwachstelle (HOCH (CVSS 7.5)) in web hosting directory script (softbizscripts).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 4.1%, höher als bei 90.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
web hosting directory script softbizscripts	`≤ 1.1`	No fix yet

Description

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module.

References

pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html · Broken Link
secunia.com/advisories/17724 · Third Party Advisory
osvdb.org/21079 · Broken Link
osvdb.org/21080 · Broken Link
osvdb.org/21081 · Broken Link
osvdb.org/21082 · Broken Link
osvdb.org/21083 · Broken Link
securityfocus.com/bid/15561 · Broken Link
vupen.com/english/advisories/2005/2557 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/23208 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free