CVE-2005-4169 - Vulnerability Details - OpenCVE

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Efiction Project	Efiction

Configuration 1 [-]

cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html
http://rgod.altervista.org/efiction2_xpl.html
http://secunia.com/advisories/17777
http://securitytracker.com/id?1015273
http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555
http://www.osvdb.org/21119
http://www.osvdb.org/21121
http://www.securityfocus.com/bid/15568
http://www.vupen.com/english/advisories/2005/2606
https://exchange.xforce.ibmcloud.com/vulnerabilities/23373

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-11T21:00:00

Updated: 2024-08-07T23:38:51.149Z

Reserved: 2005-12-11T00:00:00

Link: CVE-2005-4169

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-12-11T21:03:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-4169

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-25T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "efiction-multiple-scripts-sql-injection(23373)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555"}, {"name": "15568", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15568"}, {"name": "ADV-2005-2606", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2606"}, {"tags": ["x_refsource_MISC"], "url": "http://rgod.altervista.org/efiction2_xpl.html"}, {"name": "17777", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17777"}, {"name": "1015273", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015273"}, {"name": "21121", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21121"}, {"name": "20051125 eFiction <= 2.0 multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html"}, {"name": "21119", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/21119"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-4169", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "efiction-multiple-scripts-sql-injection(23373)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373"}, {"name": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555", "refsource": "CONFIRM", "url": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555"}, {"name": "15568", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15568"}, {"name": "ADV-2005-2606", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2606"}, {"name": "http://rgod.altervista.org/efiction2_xpl.html", "refsource": "MISC", "url": "http://rgod.altervista.org/efiction2_xpl.html"}, {"name": "17777", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17777"}, {"name": "1015273", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015273"}, {"name": "21121", "refsource": "OSVDB", "url": "http://www.osvdb.org/21121"}, {"name": "20051125 eFiction <= 2.0 multiple vulnerabilities", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html"}, {"name": "21119", "refsource": "OSVDB", "url": "http://www.osvdb.org/21119"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:38:51.149Z"}, "title": "CVE Program Container", "references": [{"name": "efiction-multiple-scripts-sql-injection(23373)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555"}, {"name": "15568", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15568"}, {"name": "ADV-2005-2606", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2606"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://rgod.altervista.org/efiction2_xpl.html"}, {"name": "17777", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17777"}, {"name": "1015273", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015273"}, {"name": "21121", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21121"}, {"name": "20051125 eFiction <= 2.0 multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html"}, {"name": "21119", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/21119"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-4169", "datePublished": "2005-12-11T21:00:00", "dateReserved": "2005-12-11T00:00:00", "dateUpdated": "2024-08-07T23:38:51.149Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:efiction_project:efiction:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "C1A2AFF2-64BD-4749-B92A-BD5020CFB467", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n de SQL en eFiction 1.0 permite a atacantes remotos ejecutar comandos SQL de su elecci\u00f3n mediante (1) el par\u00e1metro \"let\" en una acci\u00f3n \"viewlist\" de authors.php y (2) el par\u00e1metro \"sid\" de viewstory.php."}], "id": "CVE-2005-4169", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-11T21:03:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://rgod.altervista.org/efiction2_xpl.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/17777"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1015273"}, {"source": "cve@mitre.org", "url": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21119"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/21121"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/15568"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2606"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://rgod.altervista.org/efiction2_xpl.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/17777"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1015273"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.efiction.wallflowergirl.com/forums/viewtopic.php?t=1555"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/21119"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/21121"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/15568"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2606"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23373"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}