CVE-2005-3939

Published: Dec 1, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php.

Affected (1)

Products: Wsn Knowledge Base: Wsn Knowledge Base

Wsn Knowledge Base

1 product

Wsn Knowledge Base

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wsn Knowledge Base Wsn Knowledge Base	version ≤ 1.2.0

References (12)

http://pridels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17810

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21262

Source: cve@mitre.org

http://www.osvdb.org/21263

Source: cve@mitre.org

http://www.osvdb.org/21264

Source: cve@mitre.org

http://www.securityfocus.com/bid/15656

Source: cve@mitre.org

Exploit

http://pridels0.blogspot.com/2005/11/wsn-knowledge-base-sql-inj-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17810

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/21262

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21263

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21264

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15656

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.