VYPR
← All advisories
Unrated severityNVD Advisory· Published May 17, 2005· Updated Apr 16, 2026

CVE-2005-1637

CVE-2005-1637

Description

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to (1) comments.php or (2) pollcomments.php.

Affected products

2
  • Npds/Npds2 versions
    cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:npds:npds:5.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.