CVE-2005-3826

CVE-2005-3826 describes multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0. Attackers can exploit these flaws by manipulating parameters like edit_id, faq_id, c_id, and potentially search_string in query strings, allowing for arbitrary SQL command execution. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not on the CISA KEV catalog and lacking Metasploit or Nuclei modules, an ExploitDB entry (EDB-26571) confirms the existence of exploit code, though there is no evidence of active exploitation or significant community discussion.