Back
CVE-2005-4056
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters.
Published: Dec 7, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| jonathan_beckett | pluggedout_nexus | 0.1 |
GitHub Security Advisory GHSA-v3qf-cxvc-vxx9
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to...
References (10)
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html
- http://secunia.com/advisories/17909
- http://www.osvdb.org/21478
- http://www.securityfocus.com/bid/15724
- http://www.vupen.com/english/advisories/2005/2751
- http://pridels0.blogspot.com/2005/12/pluggedout-nexus-sqlxss-vuln_06.html
- http://secunia.com/advisories/17909
- http://www.osvdb.org/21478
- http://www.securityfocus.com/bid/15724
- http://www.vupen.com/english/advisories/2005/2751
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.21%
Top 34% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub