PT-2005-4623 · Softbiz · Softbiz Resource Repository Script

Published 2005-11-29 · Updated 2017-07-20 · CVE-2005-3879

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Softbiz Resource Repository Script versions 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sbres id parameter in files such as "details res.php", "refer friend.php", and "report link.php", and the sbcat id parameter in "showcats.php".

Recommendations For Softbiz Resource Repository Script versions 1.1 and earlier, consider restricting access to the vulnerable parameters sbres id and sbcat id until a fix is available. As a temporary workaround, avoid using these parameters in the affected files.

Exploit

Fix

Related Identifiers

CVE-2005-3879

Affected Products

Softbiz Resource Repository Script

References · 14

• 🔥 https://exploit-db.com/exploits/26614 · Exploit
• 🔥 http://securityfocus.com/bid/15585 · Exploit
• 🔥 https://exploit-db.com/exploits/26615 · Exploit
• 🔥 https://exploit-db.com/exploits/26616 · Exploit
• 🔥 https://exploit-db.com/exploits/26613 · Exploit
• 🔥 http://secunia.com/advisories/17555 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3879 · Security Note
• http://osvdb.org/21136 · Note
• http://vupen.com/english/advisories/2005/2617 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23208 · Note
• http://osvdb.org/21133 · Note
• http://pridels0.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html · Note
• http://osvdb.org/21135 · Note
• http://osvdb.org/21134 · Note