CVE-2005-1585 Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory paramete...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory parameter in the query string to the forum directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open solution quick.forum | = 2.1.6 | No fix listed |
References
- lostmon.blogspot.com exploit vendor-advisory
- 15200 third-party-advisory vendor-advisory
- 16326 vdb-entry vendor-advisory