← All advisories

Unrated severityNVD Advisory· Published Nov 18, 2005· Updated Jun 16, 2026

CVE-2005-3676

CVE-2005-3676

Description

SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Phpwebthings/Phpwebthings2 versions
cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpwebthings:phpwebthings:1.4.4:*:*:*:*:*:*:*
- (no CPE)range: = 1.4.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.