$ cve CVE-2005-3817 JSON

CVE-2005-3817 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 4.1% (pctl 90)

Patch early

A public exploit exists.

Description

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter in search_result.php, (2) sbres_id parameter in review.php, (3) cid parameter in browsecats.php, (4) h_id parameter in email.php, and (5) an unspecified parameter to the search module.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	4.09% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-89
On CISA KEV	no
Public exploit	yes
Published	2005-11-26
Last modified	2026-06-16

Affected (1)

Vendor	Product
softbizscripts	web hosting directory script

Public exploits

Source	Title	Date
exploit-db	SoftBizScripts Hosting Script - SQL Injection	2010-04-28
exploit-db	SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection	2005-11-24
exploit-db	SoftBiz Web Hosting Directory Script 1.1 - 'review.php?sbres_id' SQL Injection	2005-11-24
exploit-db	SoftBiz Web Hosting Directory Script 1.1 - 'browsecats.php?cid' SQL Injection	2005-11-24
exploit-db	SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection	2005-11-24

References

→ the Explorer · watch your stack · NVD