CVE-2005-3880: Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute...

Security readout for executives and security teams

This is an old SQL injection issue in Omnistar KBase 4.0 and earlier. A remote attacker could manipulate specific web parameters to run database commands. If the product is still deployed, exposed knowledge-base data and possibly application integrity could be at risk. The source bundle provides no CVSS score, patch details, or confirmed active exploitation. Exposure is likely limited to legacy Omnistar KBase installations, especially internet-facing users/comments.php or users/kb.php routes. Organizations without this product are not affected based on the supplied evidence. The structured affected-product fields are incomplete, so inventory confirmation is required. Prioritize this if Omnistar KBase is still present, especially on public sites. The business concern is unauthorized database access or modification. If inventory confirms no Omnistar KBase deployment, no direct action is indicated beyond documenting that result. Mitigation focus: Identify any Omnistar KBase deployments and confirm version and exposure.; Check vendor or archived vendor guidance for a fixed release or official workaround.; Restrict public access to vulnerable knowledge-base routes until resolved..

Prepared

Jun 29, 2026, 16:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.