CVE-2005-4232
Last modified
CVE-2005-4232 is a vulnerability of currently unknown severity. SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Jamit | Jamit Job Board | <= 2.4.1 |
References
- http://secunia.com/advisories/18007Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2879Vendor Advisory
- http://secunia.com/advisories/18007Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2879Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4232?
How severe is CVE-2005-4232?
How do I fix CVE-2005-4232?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4226Multiple "potential" SQL injection vulnerabilities in phpWeb…
- CVE-2005-4227Multiple "potential" SQL injection vulnerabilities in DCP-Po…
- CVE-2005-4228Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.…
- CVE-2005-4229Cross-site scripting (XSS) vulnerability in auction.pl in Ev…
- CVE-2005-4230SQL injection vulnerability in poll.php in Link Up Gold 2.5 …
- CVE-2005-4231Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5…
- CVE-2005-4233SQL injection vulnerability in advertiser_statistic.php in A…
- CVE-2005-4234SQL injection vulnerability in gallery.php in EncapsGallery …
- CVE-2005-4235Cross-site scripting (XSS) vulnerability in knowledgebase.ph…
- CVE-2005-4236Cross-site scripting (XSS) vulnerability in search.php in CK…
- CVE-2005-4237Cross-site scripting (XSS) vulnerability in MySQL Auction 3.…
- CVE-2005-4238Cross-site scripting (XSS) vulnerability in view_filters_pag…
Are you affected by CVE-2005-4232?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST