Back

CVE-2005-4631

SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL commands via the p parameter.

Published: Dec 31, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (81)

Vendor Product Version
ryan_lath zina 0.09.0
ryan_lath zina 0.09.1
ryan_lath zina 0.09.2
ryan_lath zina 0.09.5
ryan_lath zina 0.09.6
ryan_lath zina 0.09.7
ryan_lath zina 0.09.8
ryan_lath zina 0.09.9
ryan_lath zina 0.09.10
ryan_lath zina 0.09.11
ryan_lath zina 0.09.12
ryan_lath zina 0.09.13
ryan_lath zina 0.09.14
ryan_lath zina 0.09.15
ryan_lath zina 0.09.16
ryan_lath zina 0.09.17
ryan_lath zina 0.09.18
ryan_lath zina 0.09.19
ryan_lath zina 0.09.20
ryan_lath zina 0.09.21

…and 61 more

GitHub Security Advisory GHSA-x6v6-9qqg-hhvf

SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.21%

Top 34% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub