Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-3063

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mailgust是一个邮件发送清单的管理器，时事通讯发布工具，留言板系统。所有的已发送邮件被存储于一个WEB留言板中以供访问者阅读。 MailGust 1.9版本中存在SQL注入漏洞，远程攻击者可以通过密码提示页面中的email字段执行任意SQL指令。

AI Predicted 9.8 Difficulty: Easy EPSS 1.16% · P64

Public Exploits 1

ExploitDB · 1 EDB-1227 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-3063

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
UNU Networks MailGust User_email.PHP脚本SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Mailgust是一个邮件发送清单的管理器，时事通讯发布工具，留言板系统。所有的已发送邮件被存储于一个WEB留言板中以供访问者阅读。 MailGust 1.9版本中存在SQL注入漏洞，远程攻击者可以通过密码提示页面中的email字段执行任意SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-3063

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-3063

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-3063 (2)

Mailing List Discussions for CVE-2005-3063 (1)

Other References for CVE-2005-3063 (2)

Same Patch Batch · n/a · 2005-09-27 · 28 CVEs total

CVE-2005-3074 Rsyslog SQL注入漏洞
CVE-2005-3087 SecureW2弱随机数漏洞
CVE-2005-3086 contentServ admin/about.php目录遍历漏洞
CVE-2005-3085 Riverdark Studios RSS 多个跨站脚本攻击(XSS)漏洞
CVE-2005-3084 Sony PSP firmware TIFF拒绝服务漏洞
CVE-2005-3083 CMS Made Simple Index.PHP跨站脚本攻击漏洞
CVE-2005-3082 SEO-Board Admin.PHP SQL注入漏洞
CVE-2005-3081 Wzdftpd SITE Command 任意指令执行漏洞
CVE-2005-3080 GeSHI Example.PHP读取任意文件漏洞
CVE-2005-3079 PunBB代码包含漏洞
CVE-2005-3078 PunBB "forgotten e-mail" 跨站脚本攻击(XSS)漏洞
CVE-2005-3077 Mac OS操作系统下的Microsoft Internet Explorer浏览器中的拒绝服务漏洞
CVE-2005-3076 Simplog中多个SQL注入漏洞
CVE-2005-3075 Zengaia SQL注入漏洞
CVE-2005-2710 RealNetworks RealPlayer和Helix Player格式串处理漏洞
CVE-2005-3073 Interchange中多个未明漏洞
CVE-2005-3072 Interchange submit.html SQL注入漏洞
CVE-2005-3071 Solaris 文件系统(UFS)未明拒绝服务漏洞
CVE-2005-3070 HylaFAX拒绝服务漏洞
CVE-2005-3069 HylaFAX xferfaxstats不安全临时文件创建漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-3063

No comments yet

Leave a comment