Vulnerability in Tux Racer Tuxbank

CVE-2005-4768

SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php.

EPSS: 0.013 (67.2th percentile) — read the EPSS interpretation.

Affected products

Tux_racer Tuxbank — versions 0.7x, 0.8
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)