CVE-2005-3953 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to (1) index.php and (2) download.php, or (3) ckode parameter to baca.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.29% — more likely to be exploited than 69% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-12-01 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| bedeng psp | bedeng psp |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Bedeng PSP 1.1 - 'baca.php?ckode' SQL Injection | 2005-11-28 |
| exploit-db | Bedeng PSP 1.1 - 'download.php?a.ngroup' SQL Injection | 2005-11-28 |
| exploit-db | Bedeng PSP 1.1 - 'index.php?a.nsub' SQL Injection | 2005-11-28 |
References
- http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html
- http://secunia.com/advisories/17760
- http://www.osvdb.org/21174
- http://www.osvdb.org/21175
- http://www.osvdb.org/21176
- http://www.securityfocus.com/bid/15583
- http://pridels0.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html
- http://secunia.com/advisories/17760
- http://www.osvdb.org/21174
- http://www.osvdb.org/21175
- http://www.osvdb.org/21176
- http://www.securityfocus.com/bid/15583
→ the Explorer · watch your stack · NVD