CVE-2005-3309

Published: Oct 26, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php.

Affected (1)

Products: Zomplog: Zomplog

Zomplog

1 product

Zomplog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zomplog Zomplog	Version 3.4

References (12)

http://secunia.com/advisories/17306/

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/alerts/2005/Oct/1015088.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.osvdb.org/20250

Source: cve@mitre.org

http://www.osvdb.org/20251

Source: cve@mitre.org

http://www.osvdb.org/20252

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22827

Source: cve@mitre.org

http://secunia.com/advisories/17306/