CVE-2005-3280

CVE-2005-3280 describes a critical vulnerability in Paros 3.2.5, where the underlying HSQLDB database uses a default "sa" account password and permits remote access. This flaw allows unauthenticated remote attackers to gain privileges, as indicated by its CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), signifying a network-based attack with low complexity and potential for partial compromise of confidentiality, integrity, and availability. While the vulnerability is severe, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting it is not currently a high-profile threat.