CVE-2005-3553

Description

Multiple SQL injection vulnerabilities in include.php in PHPKIT 1.6.1 R2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in conjunction with the login/userinfo.php path and (2) the session parameter (aka the PHPKITSID variable).

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23013

https://exchange.xforce.ibmcloud.com/vulnerabilities/23010

http://www.vupen.com/english/advisories/2005/2344

http://www.securityfocus.com/bid/15354

http://www.osvdb.org/20561

http://www.osvdb.org/20560

http://securitytracker.com/id?1015167

http://secunia.com/advisories/17479

http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00110.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3