CVE-2005-4792

CVE-2005-4792 describes a SQL injection vulnerability in Appalachian State University's phpWebSite, specifically versions 0.10.1 and earlier. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the 'module' parameter in index.php. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or showing active exploitation, an exploit is publicly available on ExploitDB, though there is no evidence of broader community discussion or media coverage.