CVE-2005-4768: Tux Racer Tuxbank

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php.

Affected products

  • Tux Racer Tuxbank: version 0.7x only; version 0.8 only

Published 2005-12-31. Last modified 2026-06-16.