CVE-2003-0331 SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.

HighCVSS 10.0 EPSS 1.9%

Published: 2003-05-22 07:00
Updated: 2026-06-17 01:02
Exploit status: No public exploit known

Description

SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.

Affected products

Product	Affected versions	Fixed in
ttcms ttforum	= 4	No fix listed

References

20030520 More vulnerabilities in ttForum/ttCMS -> SQL injection mailing-list

CVSS v2.0

10.0 High

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.88% (percentile 79.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.