CVE-2005-4408

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.24%

Published

Dec 20, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMiraserver 1.0 RC4 - 'article.php?cat' SQL Injection Exploit-DBMiraserver 1.0 RC4 - 'index.php?page' SQL Injection Exploit-DBMiraserver 1.0 RC4 - 'newsitem.php?id' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) id parameter to newsitem.php, and (3) cat parameter to article.php.

Affected Products (1)

pc_media · miraservervulnerable

References (12)

http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html

http://secunia.com/advisories/18110

http://www.osvdb.org/21836

http://www.osvdb.org/21837

http://www.osvdb.org/21838

http://www.securityfocus.com/bid/15960

http://pridels0.blogspot.com/2005/12/miraserver-sql-vuln.html

http://secunia.com/advisories/18110

http://www.osvdb.org/21836

http://www.osvdb.org/21837

KEV Catalog EPSS Scores Vendors All CVEs