CVE-2005-2166

SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.

• http://dark-assassins.com/forum/viewtopic.php?t=90Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/15902Vendor Advisory
• http://dark-assassins.com/forum/viewtopic.php?t=90Exploit, Vendor Advisory, URL Repurposed
• http://secunia.com/advisories/15902Vendor Advisory

Published

Jul 6, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2160IMail stores usernames and passwords in cleartext in a cooki…7.5
• CVE-2005-2161Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 all…
• CVE-2005-2162PHP remote file inclusion vulnerability in form.inc.php3 in …
• CVE-2005-2163Cross-site scripting (XSS) vulnerability in index.php in Aut…
• CVE-2005-2164SQL injection vulnerability in Covide Groupware-CRM allows r…
• CVE-2005-2165read.cgi in GlobalNoteScript allows remote attackers to exec…
• CVE-2005-2167Cross-site scripting (XSS) vulnerability in index.php in Pla…
• CVE-2005-2168delete.php in Plague News System 0.6 and earlier allows remo…
• CVE-2005-2169Directory traversal vulnerability in source.php in Quick & D…
• CVE-2005-2170The LCF component (lcfd) in IBM Tivoli Management Framework …
• CVE-2005-2173The Flag::validate and Flag::modify functions in Bugzilla 2.…
• CVE-2005-2174Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before…