CVE-2005-3407
Estado: ModificadaAlta (7.5)—
SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.37%
- Percentil entre todas las CVEs puntuadas: 71
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain
- http://secunia.com/advisories/17333
- http://www.osvdb.org/20358
- http://www.securityfocus.com/bid/15232
- http://www.vupen.com/english/advisories/2005/2237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22905
- http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain
- http://secunia.com/advisories/17333
- http://www.osvdb.org/20358
- http://www.securityfocus.com/bid/15232
- http://www.vupen.com/english/advisories/2005/2237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22905
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-3407",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-11-01T12:47:00.000",
"references": [
{
"url": "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/17333",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/20358",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/15232",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2005/2237",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22905",
"source": "cve@mitre.org"
},
{
"url": "http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/17333",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/20358",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/15232",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2005/2237",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22905",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors."
}
],
"lastModified": "2026-06-16T22:16:54.487",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.3_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04F2AC68-8BBB-498A-9E64-F34EB55C70B3"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84B064D5-DEE7-4C4A-B3FC-D50834DEE821"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEE6F403-FAC0-4683-B8A9-7CB2AA284EBA"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_beta3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84E945E7-1EB2-430B-B1D7-09213CF2D6F1"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.4_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8A473E0-9F20-4BE6-A78B-1644B26F19FB"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7902B990-5232-46F0-8B8A-6E720F3A6D9E"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B36C4642-4A06-4E0A-8C8E-0D09AF33278C"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AFB7AA4-FD70-4F4F-BDB1-372D5A8D0C9A"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.5_rc3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5DDAEA0-A1B5-49E2-98DD-5272C38E6BA3"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6.1_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70CE4811-C15A-48F8-8E50-268911C24108"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_final:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DF8CB9F-DB55-45B5-812F-DBB3C89FA7C5"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EE2AB2F-625C-4668-A50A-7C1EC2333153"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A18FF2EA-53C5-4EC4-A368-BC1420678B32"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.6_rc3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "963CF065-3E46-44AE-9053-413E68C48236"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D65CCEE7-0809-460E-B4B1-9D03C49C4641"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5E0B6F6-11EF-478E-A63C-343CB3C9C70A"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23572B9F-23E6-40D7-863B-C2AE15D6BD2A"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0C91172-6CA8-44A6-86CC-B525DF88D52D"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D13D3A9E-60DF-442B-A629-C2BBFED7A320"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7773515F-16F1-47D7-BF45-66CBF08584F8"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7.5_dev3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DC3C204-CA3E-4901-98CC-FE84EC1F1CD3"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7_dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BFA40B6-E757-4556-ABAC-EFE1A72B8B3F"
},
{
"criteria": "cpe:2.3:a:butterfat:phpesp:1.7_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7431C81C-CF1E-48F5-B42C-8B6796D1DCF6"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}