CVE-2005-3545

Published: Nov 16, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.

Affected (1)

Products: Ibproarcade: Ibproarcade

Ibproarcade

1 product

Ibproarcade

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibproarcade Ibproarcade	Up to 2.5.2

References (16)

http://osvdb.org/20514

Source: cve@mitre.org

http://secunia.com/advisories/17457

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/151

Source: cve@mitre.org

http://www.ibproarcade.com/index.php?showtopic=7575&pid=47370&st=0&#entry47370

Source: cve@mitre.org

URL Repurposed

http://www.ibproarcade.com/index.php?showtopic=7576&pid=47373&st=0&#entry47373

Source: cve@mitre.org

URL Repurposed

http://www.securityfocus.com/archive/1/415793

Source: cve@mitre.org

http://www.securityfocus.com/bid/15333

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2334

Source: cve@mitre.org

http://osvdb.org/20514