CVE-2005-0841

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=111143649730845&w=2
http://secunia.com/advisories/14642Patch, Vendor Advisory
http://securitytracker.com/id?1013493Exploit
http://www.securityfocus.com/bid/12860Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/19787
http://marc.info/?l=bugtraq&m=111143649730845&w=2
http://secunia.com/advisories/14642Patch, Vendor Advisory
http://securitytracker.com/id?1013493Exploit
http://www.securityfocus.com/bid/12860Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/19787

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-08424.3Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrary web script or HTML CVE-2005-08435.0CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body CVE-2005-08444.6Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sens CVE-2005-08455.0Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or CVE-2005-08464.3Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbi CVE-2005-08475.0Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.CVE-2005-08485.0Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret CVE-2005-08495.0Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret CVE-2005-08505.0FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS dev CVE-2005-08515.0FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop CVE-2005-08522.1Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw IP over IP socket (IP CVE-2005-08535.0betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a dire