CVE-2005-3682 Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2...
HighCVSS 7.5
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wizz forum | = 1.20 | No fix listed |
References
- 20051112 Multible Sql injections in Wizz Forum mailing-list
- 17548 third-party-advisory vendor-advisory
- 181 third-party-advisory
- 20845 vdb-entry
- 20846 vdb-entry
- 20847 vdb-entry
- 15410 vdb-entry
- ADV-2005-2421 vdb-entry
- wizz-forumauthdetails-sql-injection(23170) vdb-entry
- wizz-topicid-sql-injection(23171) vdb-entry