CVE-2005-4419

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-20 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) series, (2) cat_parent, (3) cat, and (4) div parameters.

Affected products

Quicksquare Development Honeycomb Archive: 3.0
Quicksquare Development Honeycomb Archive Enterprise: 3.0

References

http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
http://secunia.com/advisories/18127
http://www.attrition.org/pipermail/vim/2006-March/000580.html
http://www.osvdb.org/21827
http://www.securityfocus.com/bid/15995
https://exchange.xforce.ibmcloud.com/vulnerabilities/23829
http://pridels0.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html
http://secunia.com/advisories/18127
http://www.attrition.org/pipermail/vim/2006-March/000580.html
http://www.osvdb.org/21827
http://www.securityfocus.com/bid/15995
https://exchange.xforce.ibmcloud.com/vulnerabilities/23829

Get alerted when CVE-2005-4419 or the next vulnerability affects your stack