CVE-2005-3939
WSN Knowledge Base < 1.2.0 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-3939. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in WSN Knowledge Base versions 1.2.0 and prior. It outlines the vulnerability's cause and potential impact but does not include actual exploit code.
Description
Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) perpage, (3) ascdesc, and (4) orderlinks in a displaycat action in (a) index.php; and the (5) id parameter in (b) comments.php and (c) memberlist.php.
Exploits (3)
The provided text describes a SQL injection vulnerability in WSN Knowledge Base versions 1.2.0 and prior. It outlines the vulnerability's cause and potential impact but does not include actual exploit code.
The provided text describes SQL injection vulnerabilities in WSN Knowledge Base versions 1.2.0 and prior. It includes example URLs demonstrating how unsanitized input in parameters like 'catid', 'perpage', and 'orderlinks' can be exploited.
The provided text describes a SQL injection vulnerability in WSN Knowledge Base versions 1.2.0 and prior. It outlines the lack of input sanitization and potential impacts but does not include executable exploit code.