Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-3834. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in Tunez, with an example URL demonstrating the SQL injection vector. No actual exploit code is present.
Description
Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26566
The provided text describes SQL injection and XSS vulnerabilities in Tunez, with an example URL demonstrating the SQL injection vector. No actual exploit code is present.
Classification
Writeup 80%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target:
Tunez (version not specified)
No auth needed
Prerequisites:
Network access to the target application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Exploit, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17692
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21063
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/11/tunez-sql-and-xss-vuln.html
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15548
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2556
Scores
EPSS
0.0174
EPSS Percentile
74.7%
Details
Status
published
Products (13)
tunez/tunez
0.1
tunez/tunez
0.2
tunez/tunez
0.3
tunez/tunez
0.4
tunez/tunez
0.5
tunez/tunez
0.5.5
tunez/tunez
0.7
tunez/tunez
0.9
tunez/tunez
1.0.0
tunez/tunez
1.1
... and 3 more
Published
Nov 26, 2005
Tracked Since
Feb 18, 2026