Unrated severityNVD Advisory· Published Oct 26, 2005· Updated Jun 16, 2026

CVE-2005-3309

Description

Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) index.php.

Affected products

Zomplog/Zomplog2 versions
cpe:2.3:a:zomplog:zomplog:3.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zomplog:zomplog:3.4:*:*:*:*:*:*:*
- (no CPE)range: =3.4

Patches

Vulnerability mechanics

References

securitytracker.com/alerts/2005/Oct/1015088.htmlnvdExploitVendor Advisory
secunia.com/advisories/17306/nvdVendor Advisory
www.osvdb.org/20250nvd
www.osvdb.org/20251nvd
www.osvdb.org/20252nvd
exchange.xforce.ibmcloud.com/vulnerabilities/22827nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000