CVE-2005-0805

State: Published
Severity: Not scored
Published: Mar 20, 2005
Updated: Aug 7, 2024
Reserved: Mar 20, 2005

Description

SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as global variables, as demonstrated using the imageid parameter, which is not properly handled by imagegallery.php.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20050318 possible SQL injection in Subdreamermailing-list
http://www.subdreamer.com/forum/showthread.php?t=2501
20060621 Re: possible SQL injection in Subdreamermailing-list
12839vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.