CVE-2005-4478

Papoo <2.1.2 - SQL Injection

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php.

Exploits (3)

exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26961
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26959
exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26960

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18152
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16020
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21869
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/3046
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/displayvuln.php?osvdb_id=21871
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/displayvuln.php?osvdb_id=21870

Scores

EPSS 0.0071
EPSS Percentile 72.2%

Details

CWE
CWE-89
Status published
Products (1)
papoo/papoo < 2.1.2
Published Dec 22, 2005
Tracked Since Feb 18, 2026