CVE-2005-3953 in Bedeng PSP

Summary

SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/01/2005
• Disclosure: 12/01/2005
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.00508
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3953
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3953
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3953/