CVE-2005-4664: SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled,...

Security readout for executives and security teams

CVE-2005-4664 is a legacy SQL injection issue in OcoMon 1.21, and possibly other versions, under a specific PHP configuration. If exposed, an attacker could manipulate the application database through the logon page. The public bundle does not name a confirmed patch or active exploitation. Most likely exposure is an old OcoMon 1.21 deployment, especially if the logon page is reachable from untrusted networks and the PHP magic_quotes_gpc condition matches the CVE description. Treat this as urgent if OcoMon is still in use, internet-facing, or connected to sensitive helpdesk or asset data. If no OcoMon deployment exists, priority is low after documented verification. Mitigation focus: Identify any OcoMon 1.21 or possibly affected OcoMon installations.; Check the OcoMon project or vendor guidance for fixed releases or migration advice.; Restrict untrusted network access to the OcoMon logon page..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.