CVE-2005-4232 json
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via…
published 2005-12-14 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-4227
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 68%
- public exploits
- 1
- Exploit-DB
Summary
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection
Timeline
- First public exploit (EDB-26813)
- Published
Exploit prediction
1.21% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-26813 Jamit Job Board 2.4.1 - 'index.php' SQL Injection webapps, 2005-12-14
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
-
secunia.com
/advisories/18007
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2005/2879
vdb-entry, vendor-advisory
-
osvdb.org
/21687
vdb-entry
-
securityfocus.com
/bid/15848
vdb-entry
-
attrition.org
/pipermail/vim/2006-August/000972.html
mailing-list
- pridels0.blogspot.com /2005/12/jamit-job-board-24x-sql-inj.html
Sources
- CVE List CVE-2005-4232
- NVD CVE-2005-4232
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.