CVE-2005-3305

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-26 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in the Links file, (4) the artid parameter in the Sections file, and (5) the dl_id parameter in the Download file.

Affected products

Nuked-Klan: 1.7

References

http://marc.info/?l=bugtraq&m=113017972620427&w=2
http://marc.info/?l=bugtraq&m=113019206306710&w=2
http://marc.info/?l=bugtraq&m=113019342213796&w=2
http://secunia.com/advisories/17304/
http://www.nuked-klan.org/
http://www.osvdb.org/20337
http://www.osvdb.org/20338
http://www.osvdb.org/20339
http://www.osvdb.org/20340
http://www.securityfocus.com/bid/15181
http://www.vupen.com/english/advisories/2005/2189
https://exchange.xforce.ibmcloud.com/vulnerabilities/22847

Get alerted when CVE-2005-3305 or the next vulnerability affects your stack