VULNERABILITY INTELLIGENCE

CVE-2005-4286

CVSS score7.5 HIGH
EPSS probability1.21%
CISA KEVNot currently listed
Published2005-12-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php.

Primary references