CVE-2005-4055

Published: Dec 7, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) page and (2) car parameters.

Affected (1)

Products: Cars Portal: Cars Portal

Cars Portal

1 product

Cars Portal

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cars Portal Cars Portal	version ≤ 1.1

References (12)

http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html

Source: cve@mitre.org

http://secunia.com/advisories/17914

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21482

Source: cve@mitre.org

http://www.securityfocus.com/bid/15747

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2747

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23428

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/cars-portal-v1x-sql-injection.html