CVE-2005-4225
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands…
- 7.5HighCVSS base score
- 2.0%Exploitation in 30 daysEPSS · top 19% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via (1) the category parameter in add.php, (2) the cat_desc parameter in addcat.php, (3) the level and user parameters in adduser.php, (4) the post_id parameter in del.php, (5) the cat_id parameter in delcat.php, (6) the comment_id parameter in delcomment.php, (7) the id parameter in deluser.php, (8) the post_id and category parameter in edit.php, (9) the cat_id and cat_desc parameters in editcat.php, and (10) the id, level, and user parameters in edituser.php. NOTE: the username/login.php vector is already identified by CVE-2005-2838.
Timeline
ID reserved
By mitre
Published
- 19 years later
· 19 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 2.0% · top 19% of all CVEs (10 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Affected products
n/a
- affected n/a
References
17
- 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 21659 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 18024 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 21665 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21662 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21664 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21666 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21669 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21667 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21668 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21663 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- http://glide.stanford.edu/yichen/research/sec.pdf (opens in a new tab)x_refsource_MISCx_transferred
- 21660 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- ADV-2005-2862 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 20051212 [PHP-CHECKER] 99 potential SQL injection vulnerabilities (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 21670 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 21661 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2005-4220 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2005-4225)Record last updated .