CVE-2005-4071 in Magic Forum Personalinfo

Summary

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/08/2005

Disclosure

12/07/2005

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.01032

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!