CVE-2005-3953

Published: Dec 1, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php.

Affected (1)

Products: Bedeng Psp: Bedeng Psp

Bedeng Psp

1 product

Bedeng Psp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bedeng Psp Bedeng Psp	Version 1.1

References (12)

http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17760

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21174

Source: cve@mitre.org

http://www.osvdb.org/21175

Source: cve@mitre.org

http://www.osvdb.org/21176

Source: cve@mitre.org

http://www.securityfocus.com/bid/15583

Source: cve@mitre.org

Exploit

http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html