CVE-2005-3844

Published: Nov 26, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) poll and (2) category parameters to index.php, and (3) the ctg parameter in an archive action.

Affected (1)

Products: Phpwordpress: Php News And Article Manager

Phpwordpress

1 product

Php News And Article Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Phpwordpress Php News And Article Manager	Version 3.0

References (12)

http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/phpwordpress-30-sql-inj.html

Source: cve@mitre.org

http://secunia.com/advisories/17733

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21110

Source: cve@mitre.org

http://www.securityfocus.com/bid/15582

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2594

Source: cve@mitre.org

http://forum.word-press.net/index.php?&showtopic=76&st=0&#entry181