AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2005-4346

MEDIUM · CVSS 5 EPSS 1.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-19 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2005-4346
Severity
MEDIUM
CVSS
5
EPSS
1.30%

Original NVD Description

Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces an invalid SQL query that leaks the full pathname in a SQL syntax error message. NOTE: this was originally claimed to be SQL injection, but a cleansing step strips all non-digit characters and leaves an empty permalink argument, which leads to the syntax error.