CVE-2005-3877

CVE-2005-3877 describes multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier versions, specifically impacting the cafuego simple_document_management_system. Attackers can exploit these flaws by injecting arbitrary SQL commands through the folder_id parameter in list.php and the mid parameter in a view action to messages.php. This vulnerability carries a CVSS score of 7.5, indicating high severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No, Hot List: Inactive), exploit code is publicly available on ExploitDB. Despite this, there is no community discussion or media coverage surrounding this CVE, suggesting a lack of widespread attention.