CVE-2005-3884

CVE-2005-3884 describes multiple SQL injection vulnerabilities in Zainu 2.0 and earlier versions. These flaws allow remote attackers to execute arbitrary SQL commands by manipulating the 'term' and 'start' parameters within the index.php search action. With a CVSS score of 7.5, this vulnerability is considered high severity, requiring no authentication and low attack complexity (AV:N/AC:L/Au:N). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P) of the affected system. While not listed on the KEV catalog and showing no active exploitation or social media discussion, an exploit for this vulnerability is publicly available on ExploitDB (EDB-26604). Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild despite the available exploit code.