CVE-2005-4001
phpyellow: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phpyellow:phpyellowtm_lite
- phpyellow:phpyellowtm_pro