CVE-2005-3817

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module.

• CWE-89

• http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.htmlBroken Link
• http://secunia.com/advisories/17724Third Party Advisory
• http://www.osvdb.org/21079Broken Link
• http://www.osvdb.org/21080Broken Link
• http://www.osvdb.org/21081Broken Link
• http://www.osvdb.org/21082Broken Link
• http://www.osvdb.org/21083Broken Link
• http://www.securityfocus.com/bid/15561Broken Link
• http://www.vupen.com/english/advisories/2005/2557Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23208Third Party Advisory
• http://pridels0.blogspot.com/2005/11/web-host-directory-script-multiple.htmlBroken Link
• http://secunia.com/advisories/17724Third Party Advisory
• http://www.osvdb.org/21079Broken Link
• http://www.osvdb.org/21080Broken Link
• http://www.osvdb.org/21081Broken Link
• http://www.osvdb.org/21082Broken Link
• http://www.osvdb.org/21083Broken Link
• http://www.securityfocus.com/bid/15561Broken Link
• http://www.vupen.com/english/advisories/2005/2557Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23208Third Party Advisory

Published

Nov 26, 2005

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3811Directory traversal vulnerability in admin/main.php in AMAX …
• CVE-2005-3812freeFTPd 1.0.10 allows remote authenticated users to cause a…
• CVE-2005-3813IMAP service (meimaps.exe) of MailEnable Professional 1.7 an…
• CVE-2005-3814Multiple cross-site scripting (XSS) vulnerabilities in Smart…
• CVE-2005-3815SQL injection vulnerability in forum.php in Orca Forum 4.3b …
• CVE-2005-3816Multiple SQL injection vulnerabilities in forum.php in freeF…
• CVE-2005-3818Multiple cross-site scripting (XSS) vulnerabilities in vTige…
• CVE-2005-3819Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and…
• CVE-2005-3820Multiple directory traversal vulnerabilities in index.php in…
• CVE-2005-3821Cross-site scripting (XSS) vulnerability in vTiger CRM 4.2 a…
• CVE-2005-3822Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and…
• CVE-2005-3823The Users module in vTiger CRM 4.2 and earlier allows remote…