CVE-2005-3497

SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter

published November 4, 2005

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter. NOTE: on 20060210, the vendor disputed this issue, saying "this is 100% false reporting, this is a slander campaign from a customer who had a vulnerability in his SERVER not the software." However, followup investigation strongly suggests that the original report is correct

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01395 · 72.0th percentile
Published
2005-11-04T00:00Z
EPSS history
Timeline
  • 04 NOV 00:00Z
    SQL injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to execute arbitrary SQL commands via the serviceid parameter
    cvelistv5