CVE-2005-0841 json
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly…
published 2005-03-24 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-0842
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.2%
- EPSS 1.2% chance of exploitation in 30 days, percentile 69%
- public exploits
- 1
- Exploit-DB
Summary
SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via (1) the person parameter to people.php or (2) the Login field.
Patch / fix
- secunia.com/advisories/14642 advisory
Timeline
- First public exploit (EDB-892)
- Published
Exploit prediction
1.23% chance of exploitation in the next 30 days, higher than 69% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-892 phpMyFamily 1.4.0 - Authentication Bypass webapps, 2005-03-21
- securitytracker.com http://securitytracker.com/id?1013493 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/bid/12860 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
secunia.com
/advisories/14642
third-party-advisory, patch, vendor-advisory
-
securitytracker.com
/id?1013493
vdb-entry, exploit
-
securityfocus.com
/bid/12860
vdb-entry, exploit
-
exchange.xforce.ibmcloud.com
/vulnerabilities/19787
vdb-entry
-
marc.info
/?l=bugtraq&m=111143649730845&w=2
mailing-list
Sources
- CVE List CVE-2005-0841
- NVD CVE-2005-0841
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.