CVE-2005-4001: Phpyellow Phpyellowtm Lite

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php.

Affected products

• Phpyellow Phpyellowtm Lite: version 5.33 only
• Phpyellow Phpyellowtm Pro: version 5.33 only

Published 2005-12-05. Last modified 2026-06-16.