CVE-2005-3817

no score yetEPSS 4.1%

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module.

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2005-11-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

softbizscripts:web_hosting_directory_script

References

http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.html
http://secunia.com/advisories/17724
http://www.osvdb.org/21079
http://www.osvdb.org/21080
http://www.osvdb.org/21081

Check your stack JSON