Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4390. PoCs published by r0t.
AI-analyzed exploit summary The provided content describes an SQL injection vulnerability in ContentServ version 3.1 and prior. It outlines the issue and provides a basic example URL for exploitation but lacks actual exploit code.
Description
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by r0t · textwebappsphp
https://www.exploit-db.com/exploits/26896
The provided content describes an SQL injection vulnerability in ContentServ version 3.1 and prior. It outlines the issue and provides a basic example URL for exploitation but lacks actual exploit code.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target:
ContentServ 3.1 and prior
No auth needed
Prerequisites:
Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15956
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2005/12/contentserv-31-sql-inj.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2982
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23825
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21851
Scores
EPSS
0.0112
EPSS Percentile
61.9%
Details
Status
published
Products (1)
contentserv/contentserv
< 3.1
Published
Dec 20, 2005
Tracked Since
Feb 18, 2026