CVE-2005-3868

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id, (3) stat, and (4) source parameters to index.php, and (5) through the image parameters with an add request.

Affected (1)

Products: Turn K: K Search

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Turn K K Search	version ≤ 1.0

References (12)

http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17719

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/13993

Source: cve@mitre.org

http://www.osvdb.org/21127

Source: cve@mitre.org

http://www.securityfocus.com/bid/15588

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2616

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/k-search-multiple-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17719

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/13993

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21127

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15588

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.vupen.com/english/advisories/2005/2616

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.