← All advisories

Unrated severityNVD Advisory· Published Dec 14, 2005· Updated Jun 16, 2026

CVE-2005-4240

CVE-2005-4240

Description

SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Vcd Db/Vcd Db7 versions
cpe:2.3:a:vcd-db:vcd-db:0.97:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:vcd-db:vcd-db:0.97:*:*:*:*:*:*:*
- cpe:2.3:a:vcd-db:vcd-db:0.98:*:*:*:*:*:*:*
- cpe:2.3:a:vcd-db:vcd-db:0.961:*:*:*:*:*:*:*
- cpe:2.3:a:vcd-db:vcd-db:0.971:*:*:*:*:*:*:*
- cpe:2.3:a:vcd-db:vcd-db:0.972:*:*:*:*:*:*:*
- cpe:2.3:a:vcd-db:vcd-db:0.973:*:*:*:*:*:*:*
- (no CPE)range: <=0.98

Patches

Vulnerability mechanics

References

3

www.securityfocus.com/bid/15840nvdExploit
pridels0.blogspot.com/2005/12/vcd-db-vuln.htmlnvd
www.osvdb.org/21699nvd

News mentions

0

No linked articles in our index yet.