CVE-2005-3236
published 2005-10-14CVE-2005-3236: Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid…
PriorityP335medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
3.69%
88.3th percentile
Multiple SQL injection vulnerabilities in Cyphor 0.19 allow remote attackers to execute arbitrary SQL and obtain administrative access via (1) the fid parameter of newmsg.php, which can enable XSS attacks when the SQL syntax is invalid or (2) the nick parameter of lostpwd.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cynox | cyphor | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
exploitdb·2005-10-08
CVE-2005-3236 Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
---
source: https://www.securityfocus.com/bid/15047/info
Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities.
Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible.
http://www.example.com/[path]/newmsg.php?fid=''%20UNION%20SELECT%20nick,%20password,%20null,%20null%20FROM%20[table_pr\efix]users%20/*
Exploit-DB
Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
exploitdb·2005-10-08
CVE-2005-3236 Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
---
source: https://www.securityfocus.com/bid/15047/info
Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities.
Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible.
Cyphor 0.19 SQL Injection/board takeover body { background-color:#111111; SCROLLBAR-ARROW-COLOR:#ffffff;
SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: #1CB081; } img
{background-color: #FFFFFF !important} input {background-color: #303030
!important} option { background-color: #303030 !important} textarea
{background-color: #303030 !important} input {color: #1CB081 !important} option
{color: #1CB081 !important} textarea {color: #1CB081 !import
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=112879353805769&w=2http://secunia.com/advisories/17104/http://securityreason.com/securityalert/70http://securitytracker.com/id?1015020http://www.osvdb.org/19943http://www.osvdb.org/19944http://www.osvdb.org/19945http://www.securityfocus.com/bid/15047https://exchange.xforce.ibmcloud.com/vulnerabilities/22552http://marc.info/?l=bugtraq&m=112879353805769&w=2http://secunia.com/advisories/17104/http://securityreason.com/securityalert/70http://securitytracker.com/id?1015020http://www.osvdb.org/19943http://www.osvdb.org/19944http://www.osvdb.org/19945http://www.securityfocus.com/bid/15047https://exchange.xforce.ibmcloud.com/vulnerabilities/22552
2005-10-14
Published