CVE-2005-3827

agilebill < 1.4.92 - SQL Injection via product_cat id Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3827. PoCs published by r0t.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in AgileBill version 1.4.92, where user-supplied input is not properly sanitized before being used in an SQL query. The example URL demonstrates how an attacker could inject malicious SQL code via the 'id' parameter.

Description

SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t · textwebappsphp
https://www.exploit-db.com/exploits/26596

The provided text describes an SQL injection vulnerability in AgileBill version 1.4.92, where user-supplied input is not properly sanitized before being used in an SQL query. The example URL demonstrates how an attacker could inject malicious SQL code via the 'id' parameter.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: AgileBill 1.4.92
No auth needed
Prerequisites: Access to the vulnerable AgileBill application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17723
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2591
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015272
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21103
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15572

Scores

EPSS 0.0128
EPSS Percentile 66.2%

Details

Status published
Products (1)
agileco/agilebill < 1.4.92
Published Nov 26, 2005
Tracked Since Feb 18, 2026