Unrated severityNVD Advisory· Published Nov 29, 2005· Updated Jun 16, 2026

CVE-2005-3880

Description

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_id and (3) id parameters in users/kb.php.

Affected products

Omnistar Interactive/Omnistar Kbase
cpe:2.3:a:omnistar_interactive:omnistar_kbase:*:*:*:*:*:*:*:*
Range: <=4.0
Omnistar/KBasellm-create
Range: <=4.0

Patches

Vulnerability mechanics

References

pridels0.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.htmlnvd
secunia.com/advisories/17773nvd
www.osvdb.org/21203nvd
www.osvdb.org/21204nvd
www.securityfocus.com/bid/15635nvd
www.vupen.com/english/advisories/2005/2623nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000