VULNERABILITY INTELLIGENCE
CVE-2005-3968
CVSS score7.5 HIGH
EPSS probability2.02%
CISA KEVNot currently listed
Published2005-12-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Patch, URL Repurposed
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit