Unrated severityNVD Advisory· Published Jul 6, 2005· Updated Apr 16, 2026
CVE-2005-2166
CVE-2005-2166
Description
SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Affected products
4cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:frozenplague.net:plague_news_system:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc3:*:*:*:*:*:*:*
- cpe:2.3:a:frozenplague.net:plague_news_system:0.4rc4:*:*:*:*:*:*:*
- cpe:2.3:a:frozenplague.net:plague_news_system:0.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- dark-assassins.com/forum/viewtopic.phpnvdExploitVendor AdvisoryURL Repurposed
- secunia.com/advisories/15902nvdVendor Advisory
News mentions
0No linked articles in our index yet.