CVE-2005-3879
Softbiz Resource Repository Script <= 1.1 - SQL Injection via sbres_id or sbcat_id Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2005-3879. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Softbiz Resource Repository Script, specifically in the 'showcats.php' file via the 'sbcat_id' parameter. It lacks executable exploit code but details the vulnerability and potential impact.
Description
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sbres_id parameter in (a) details_res.php, (b) refer_friend.php, and (c) report_link.php, and (2) the sbcat_id parameter in (d) showcats.php.
Exploits (4)
The provided text describes a SQL injection vulnerability in Softbiz Resource Repository Script, specifically in the 'showcats.php' file via the 'sbcat_id' parameter. It lacks executable exploit code but details the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in Softbiz Resource Repository Script, specifically in the 'report_link.php' file where the 'sbres_id' parameter is not properly sanitized. The writeup references a SecurityFocus BID but does not include functional exploit code.
The provided text describes a SQL injection vulnerability in Softbiz Resource Repository Script, specifically in the 'refer_friend.php' file via the 'sbres_id' parameter. It lacks executable exploit code but details the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in Softbiz Resource Repository Script, specifically in the 'details_res.php' file via the 'sbres_id' parameter. It lacks executable exploit code but confirms the vulnerability's existence and potential impact.