CVE-2005-3682 in Forum

Summary

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 11/18/2005
• Moderation: VulDB entry created
• Entries: 3
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.04908
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3682
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3682
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3682/