CVE-2005-3648

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=113165668814241&w=2
http://osvdb.org/20748
http://rgod.altervista.org/moodle16dev.htmlExploit, Vendor Advisory
http://secunia.com/advisories/17526/Patch, Vendor Advisory
http://securitytracker.com/id?1015181
http://www.securityfocus.com/bid/15380/Exploit
http://www.vupen.com/english/advisories/2005/2387
https://exchange.xforce.ibmcloud.com/vulnerabilities/23058
http://marc.info/?l=bugtraq&m=113165668814241&w=2
http://osvdb.org/20748
http://rgod.altervista.org/moodle16dev.htmlExploit, Vendor Advisory
http://secunia.com/advisories/17526/Patch, Vendor Advisory
http://securitytracker.com/id?1015181
http://www.securityfocus.com/bid/15380/Exploit
http://www.vupen.com/english/advisories/2005/2387
https://exchange.xforce.ibmcloud.com/vulnerabilities/23058

Timeline

Published: Nov 17, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-36492.6jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.CVE-2005-36509.3The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows CVE-2005-36517.5Stack-based buffer overflow in the dissect_ospf_v3_address_prefix function in the OSPF protocol dissector in Ethereal 0.10.12, and possibly CVE-2005-36527.5Heap-based buffer overflow in Citrix Program Neighborhood client 9.0 and earlier allows remote attackers to execute arbitrary code via a lon CVE-2005-365310.0Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before CVE-2005-36547.5Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code CVE-2005-36557.5Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remo CVE-2005-365610.0Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication against a Post CVE-2005-36575.0The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to re CVE-2005-36587.5Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as CVE-2005-36595.0nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6 CVE-2005-36604.9Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creating a large number of connected