CVE-2005-4010

Published: Dec 5, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php.

Affected (1)

Products: Sensation Designs: Kbase Express

Sensation Designs

1 product

Kbase Express

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sensation Designs Kbase Express	version ≤ 1.0.0

References (14)

http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17806

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21340

Source: cve@mitre.org

http://www.osvdb.org/21341

Source: cve@mitre.org

http://www.securityfocus.com/bid/15635

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2641

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23309

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html