Unscored CVE-2005-0292 EUVD-2005-0293GHSA-834h-ppvj-m6qg

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, al…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in index.php in PHP Gift Registry (phpGiftReg) 1.4.0, and possibly other versions before 1.5.0b1, allow remote attackers to execute arbitrary SQL commands via the (1) messageid, (2) shopper, (3) shopfor, or (4) itemid parameters.

References

12289 vdb-entry
1012910 vdb-entry
phpgiftregistry-sql-injection(18925) vdb-entry
20050307 Re: phpGiftReq SQL Injection mailing-list
13873 third-party-advisory
20050116 phpGiftReq SQL Injection mailing-list
20050116 phpGiftReq SQL Injection mailing-list