CVE-2005-3884

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term and (2) start parameters to index.php.

Affected (1)

Products: Zainu: Zainu

Zainu

1 product

Zainu

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zainu Zainu	Version 2.0

References (12)

http://pridels0.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17766

Source: cve@mitre.org

http://www.osvdb.org/21197

Source: cve@mitre.org

http://www.securityfocus.com/bid/15579

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2603

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23274

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html