CVE-2005-4702
Last modified
CVE-2005-4702 is a vulnerability of currently unknown severity. SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. EPSS estimates a 1.00% chance of exploitation in the next 30 days.
Description
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to inject arbitrary SQL commands via the gameid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, the demonstration code as used by third parties suggests that this might be a different type of vulnerability related to shell metacharacters. Finally, this could be a rediscovery of CVE-2004-1430.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ipbproarcade | Ipbproarcade | 2.5.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4702?
How severe is CVE-2005-4702?
How do I fix CVE-2005-4702?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4696The Microsoft Wireless Zero Configuration system (WZCS) stor…
- CVE-2005-4697The Microsoft Wireless Zero Configuration system (WZCS) allo…
- CVE-2005-4698Cross-site scripting (XSS) vulnerability in TellMe 1.2 and e…
- CVE-2005-4699Argument injection vulnerability in TellMe 1.2 and earlier a…
- CVE-2005-4700TellMe 1.2 and earlier, when the Server (o_Server) and HEAD …
- CVE-2005-4701Unspecified vulnerability in Process File System (procfs) in…
- CVE-2005-4703Apache Tomcat 4.0.3, when running on Windows, allows remote …
- CVE-2005-4704Unspecified vulnerability in BEA WebLogic Server and WebLogi…
- CVE-2005-4705BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.…
- CVE-2005-4706Unspecified vulnerability in the "privilege management" feat…
- CVE-2005-4707Multiple cross-site scripting (XSS) vulnerabilities in PHP G…
- CVE-2005-4708Adobe Macromedia MX 2004 products, Captivate, Contribute 2, …
Are you affected by CVE-2005-4702?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
