CVE-2005-4286 | BDVDB-2026-14072 Detail

Description#

Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.phplogcon.com/Article9.phtml
http://cvs.sourceforge.net/viewcvs.py/phplogcon/phplogcon/submit.php?r1=1.4&r2=1.5
http://www.vupen.com/english/advisories/2005/2930
http://secunia.com/advisories/18053

Exploit#

No public exploit known

History#

Version 12005-12-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.