Vulnerability   
Search   
    Search 210752 CVE descriptions
and 93608 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.56829
Category:CGI abuses
Title:phpWebThings <= 1.4 Patched Multiple vulnerabilities
Summary:NOSUMMARY
Description:Description:

The remote host is running phpWebThings, which according to its version
number, is likely vulnerable to multiple SQL injection attacks as well
as cross site scripting attacks. Versions 1.4 are affected by all of
the above problems, while version 1.4 patched is reportedly vulnerable
to SQL injection vulnerabilities.

Solution : Upgrade to a later version when one is available.

Risk factor : High

CVSS Score:
7.5

Cross-Ref: BugTraq ID: 15399
BugTraq ID: 15465
BugTraq ID: 15276
Common Vulnerability Exposure (CVE) ID: CVE-2005-3676
http://www.securityfocus.com/bid/15399/
Bugtraq: 20051111 SQL injection in phpWebThing 1.4.4 (Google Search)
http://marc.info/?l=bugtraq&m=113198898514200&w=2
http://www.osvdb.org/20945
http://www.vupen.com/english/advisories/2005/2860
XForce ISS Database: phpwebthings-download-sql-injection(23047)
https://exchange.xforce.ibmcloud.com/vulnerabilities/23047
Common Vulnerability Exposure (CVE) ID: CVE-2005-4218
http://www.securityfocus.com/bid/15465
https://www.exploit-db.com/exploits/1324
http://rgod.altervista.org/phpwebth14_xpl.html
Common Vulnerability Exposure (CVE) ID: CVE-2005-4226
Bugtraq: 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities (Google Search)
http://www.securityfocus.com/archive/1/419280/100/0/threaded
http://www.securityfocus.com/archive/1/419487/100/0/threaded
http://glide.stanford.edu/yichen/research/sec.pdf
http://www.osvdb.org/21650
http://www.osvdb.org/21651
http://www.osvdb.org/21652
http://www.osvdb.org/21653
http://www.osvdb.org/21654
http://www.osvdb.org/21655
http://www.osvdb.org/21656
http://secunia.com/advisories/18011/
XForce ISS Database: phpwebthings-download-ref-sql-injection(23565)
https://exchange.xforce.ibmcloud.com/vulnerabilities/23565
Common Vulnerability Exposure (CVE) ID: CVE-2005-3585
BugTraq ID: 15277
http://www.securityfocus.com/bid/15277
Bugtraq: 20051105 XSS & SQL injection in phpWebThing (Google Search)
http://marc.info/?l=bugtraq&m=113122187101383&w=2
http://www.osvdb.org/20441
http://secunia.com/advisories/17410/
XForce ISS Database: phpwebthings-forum-sql-injection(22972)
https://exchange.xforce.ibmcloud.com/vulnerabilities/22972
Common Vulnerability Exposure (CVE) ID: CVE-2005-3584
http://www.securityfocus.com/bid/15276
CopyrightCopyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 93608 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.