CVE-2005-4040

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-06 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameters, possibly the searchwhat parameter to definesearch.jsp.

Affected products

Tawbaware Filelister: through 0.51

References

http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html
http://secunia.com/advisories/17821
http://www.osvdb.org/21416
http://www.osvdb.org/21476
http://www.securityfocus.com/bid/15706
http://www.vupen.com/english/advisories/2005/2725
https://exchange.xforce.ibmcloud.com/vulnerabilities/23418
http://pridels0.blogspot.com/2005/12/filelister-sql-inj-vuln.html
http://secunia.com/advisories/17821
http://www.osvdb.org/21416
http://www.osvdb.org/21476
http://www.securityfocus.com/bid/15706

Get alerted when CVE-2005-4040 or the next vulnerability affects your stack