CVE-2005-3305: SQL Injection
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forumid or (2) threadid parameter in the Forum file, (3) the linkid in the Links file, (4) the artid parameter in the Sections file, and (5) the dlid parameter in the Download file.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3305?
CVE-2005-3305 is considered a critical SQL injection vulnerability that can allow attackers to execute arbitrary SQL commands.
How do I fix CVE-2005-3305?
To fix CVE-2005-3305, it is recommended to update Nuked Klan to a version that addresses these SQL injection vulnerabilities.
What are the affected components in CVE-2005-3305?
CVE-2005-3305 affects several components, including the Forum, Links, Sections, and Downloads files in Nuked Klan 1.7.
What types of attacks can be executed through CVE-2005-3305?
Attackers can exploit CVE-2005-3305 to perform unauthorized SQL commands, leading to data manipulation or unauthorized access to the database.
Is there a public exploit available for CVE-2005-3305?
Yes, there are known public exploits for CVE-2005-3305 that demonstrate how attackers can manipulate the vulnerable parameters.