Published: 22/12/2005 Updated: 08/09/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
papoo papoo

source: wwwsecurityfocuscom/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could allow an attacker to compromise the application, access or modify data, or exp ...

source: wwwsecurityfocuscom/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could allow an attacker to compromise the application, access or modify data, or explo ...

source: wwwsecurityfocuscom/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit ...

CWE-89 http://www.securityfocus.com/bid/16020 http://www.osvdb.org/21869 http://www.osvdb.org/displayvuln.php?osvdb_id=21870 http://www.osvdb.org/displayvuln.php?osvdb_id=21871 http://secunia.com/advisories/18152 http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html http://www.vupen.com/english/advisories/2005/3046 https://nvd.nist.gov https://www.exploit-db.com/exploits/26961/

CVE-2005-4478

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect