CVE-2005-4049

HIGH · CVSS 7.5 EPSS 2.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-07 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2005-4049

Severity

HIGH

CVSS

7.5

EPSS

2.31%

Original Filing — NVD Description

Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.