SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
Loading...
Loading...
SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
December 11, 2005
April 16, 2026
Working exploit code is in the public domain (1 Exploit-DB entry). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.
efiction 1.0/1.1/2.0 - 'uid' SQL Injection
Open source ↗See which npm, PyPI, Go, and Maven packages are affected by CVE-2005-4170
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.