Unscored severity · published Nov 16, 2005
CVE-2005-3545
SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter
–
CVSS
1.7%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php of the report module in ibProArcade 2.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IB
Ibproarcade · Ibproarcade
through 2.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3545
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3545
osvdb.org
http://osvdb.org/20514
Patch
http://secunia.com/advisories/17457
securityreason.com
http://securityreason.com/securityalert/151
URL Repurposed
http://www.ibproarcade.com/index.php?showtopic=7575&pid=47370&st=0&#entry47370
URL Repurposed
http://www.ibproarcade.com/index.php?showtopic=7576&pid=47373&st=0&#entry47373
www.securityfocus.com
http://www.securityfocus.com/archive/1/415793
More from Ibproarcade
–
CVE-2008-0770
SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the g_display_order cookie parameter