CVE-2005-3236

Published: Oct 14, 2005Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.

Affected (1)

Products: Cynox: Cyphor

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cynox Cyphor	Version 0.19

References (18)

http://marc.info/?l=bugtraq&m=112879353805769&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17104/

Source: cve@mitre.org

http://securityreason.com/securityalert/70

Source: cve@mitre.org

http://securitytracker.com/id?1015020

Source: cve@mitre.org

http://www.osvdb.org/19943

Source: cve@mitre.org

http://www.osvdb.org/19944

Source: cve@mitre.org

http://www.osvdb.org/19945

Source: cve@mitre.org

http://www.securityfocus.com/bid/15047

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22552

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112879353805769&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17104/

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/70

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/19943

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/19944

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/19945

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15047

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22552

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.