PT-2005-1956 · Unknown · Photopost Php Pro

James Bercegay · Published 2005-03-29 · Updated 2016-10-18 · CVE-2005-0929

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PhotoPost PHP Pro versions 5.x

Description A SQL injection issue may allow remote attackers to execute arbitrary SQL commands. This can be achieved via the sl parameter to "showmembers.php" or the photo parameter to "showphoto.php".

Recommendations For PhotoPost PHP Pro version 5.x, update to a version that includes a fix for this issue to prevent SQL injection attacks.

Exploit

Fix

Related Identifiers

CVE-2005-0929

Affected Products

Photopost Php Pro

References · 11

• 🔥 https://exploit-db.com/exploits/14453 · Exploit
• 🔥 https://exploit-db.com/exploits/25311 · Exploit
• 🔥 https://exploit-db.com/exploits/25312 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0929 · Security Note
• http://osvdb.org/15100 · Note
• http://osvdb.org/15099 · Note
• http://marc.info/?l=bugtraq&m=111213719017716&w=2 · Note
• http://securitytracker.com/id?1013581 · Note
• http://secunia.com/advisories/14742 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0929 · Note
• http://marc.info/?l=bugtraq&m=111205342909640&w=2 · Note