CVE-2005-3748

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter.

CVSS Metrics

Affected Products (3)

GitHub Security Advisory GHSA-m495-gvh6-rqc9

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier...

References (10)

• http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html Exploit, Patch, Vendor Advisory
• http://secunia.com/advisories/17638 Patch, Vendor Advisory
• http://www.osvdb.org/21002 Exploit
• http://www.securityfocus.com/bid/15519 Exploit
• http://www.vupen.com/english/advisories/2005/2516 Vendor Advisory
• http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html Exploit, Patch, Vendor Advisory
• http://secunia.com/advisories/17638 Patch, Vendor Advisory
• http://www.osvdb.org/21002 Exploit
• http://www.securityfocus.com/bid/15519 Exploit
• http://www.vupen.com/english/advisories/2005/2516 Vendor Advisory