{"api_version":"1","generated_at":"2026-07-23T10:50:54+00:00","cve":"CVE-2005-3978","urls":{"html":"https://cve.report/CVE-2005-3978","api":"https://cve.report/api/cve/CVE-2005-3978.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3978","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3978"},"summary":{"title":"CVE-2005-3978","description":"Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-03 19:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html","name":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"- UNSECURED SYSTEMS -: NetClassifieds all versions SQL inj. vuln","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/15683","name":"http://www.securityfocus.com/bid/15683","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"NetClassifieds Products Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/17853","name":"http://secunia.com/advisories/17853","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - NetClassifieds Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/21379","name":"http://www.osvdb.org/21379","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/21380","name":"http://www.osvdb.org/21380","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.vupen.com/english/advisories/2005/2689","name":"http://www.vupen.com/english/advisories/2005/2689","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/21378","name":"http://www.osvdb.org/21378","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3978","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3978","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3978","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"scriptdevelopers.net","cpe5":"netclassifieds","cpe6":"1.0.1","cpe7":"*","cpe8":"free","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"3978","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"scriptdevelopers.net","cpe5":"netclassifieds","cpe6":"1.0.1","cpe7":"*","cpe8":"premium","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"3978","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"scriptdevelopers.net","cpe5":"netclassifieds","cpe6":"1.5.1","cpe7":"*","cpe8":"professional","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"3978","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"scriptdevelopers.net","cpe5":"netclassifieds","cpe6":"1.9.6.3","cpe7":"*","cpe8":"standard","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:31:48.908Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"17853","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/17853"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html"},{"name":"21380","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21380"},{"name":"21378","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21378"},{"name":"21379","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21379"},{"name":"15683","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15683"},{"name":"ADV-2005-2689","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2689"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-12-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2006-01-12T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"17853","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/17853"},{"tags":["x_refsource_MISC"],"url":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html"},{"name":"21380","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21380"},{"name":"21378","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21378"},{"name":"21379","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21379"},{"name":"15683","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15683"},{"name":"ADV-2005-2689","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2689"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3978","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"17853","refsource":"SECUNIA","url":"http://secunia.com/advisories/17853"},{"name":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html","refsource":"MISC","url":"http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html"},{"name":"21380","refsource":"OSVDB","url":"http://www.osvdb.org/21380"},{"name":"21378","refsource":"OSVDB","url":"http://www.osvdb.org/21378"},{"name":"21379","refsource":"OSVDB","url":"http://www.osvdb.org/21379"},{"name":"15683","refsource":"BID","url":"http://www.securityfocus.com/bid/15683"},{"name":"ADV-2005-2689","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2689"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3978","datePublished":"2005-12-03T19:00:00.000Z","dateReserved":"2005-12-03T00:00:00.000Z","dateUpdated":"2024-08-07T23:31:48.908Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-03 19:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.0.1:*:free:*:*:*:*:*","matchCriteriaId":"4DDF5E08-7D19-412C-A5F2-1536CD8FBA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.0.1:*:premium:*:*:*:*:*","matchCriteriaId":"BFA73AC6-853D-425E-AE89-2B0DDE954522"},{"vulnerable":true,"criteria":"cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.5.1:*:professional:*:*:*:*:*","matchCriteriaId":"5B047794-1EC7-4EE8-A990-CDA5C5515B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:scriptdevelopers.net:netclassifieds:1.9.6.3:*:standard:*:*:*:*:*","matchCriteriaId":"080D0804-8C24-4BAA-8771-9F8CAFB86A96"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3978","Ordinal":"1","Title":"CVE-2005-3978","CVE":"CVE-2005-3978","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3978","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.","Type":"Description","Title":"CVE-2005-3978"},{"CveYear":"2005","CveId":"3978","Ordinal":"2","NoteData":"2005-12-03","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"3978","Ordinal":"3","NoteData":"2006-01-12","Type":"Other","Title":"Modified"}]}}}