Back

CVE-2005-3855

SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL commands via the AlbumID parameter.

Published: Nov 27, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
easybe 1-2-3_music_store 1.0

GitHub Security Advisory GHSA-6gq4-5228-83pp

SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.16%

Top 35% most likely to be exploited

Threat Score 30.3 / 100

Data Sources

NVD EPSS GitHub