downloads.securityfocus.com
http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl CVE-2005-4656
TClanPortal 1.1.3 - 'id' SQL Injection
Record summary
CVE-2005-4656 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTClanPortal 1.1.3 - 'id' SQL InjectionExploitDB exploitby Devil-00Not analyzed1 file
References
717324Third-party advisory
http://secunia.com/advisories/17324 20305vdb entry
http://www.osvdb.org/20305 15173vdb entry
http://www.securityfocus.com/bid/15173 ADV-2005-2187vdb entry
http://www.vupen.com/english/advisories/2005/2187 tclanportal-index-sql-injection(22869)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/22869 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-4656