CVE-2005-4071 Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2)...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cfmagic magic forum personal | <= 2.5 | No fix listed |
References
- pridels0.blogspot.com
- 17935 third-party-advisory vendor-advisory
- 21501 vdb-entry
- 21502 vdb-entry
- 15774 vdb-entry
- ADV-2005-2794 vdb-entry vendor-advisory
- magicforumpersonal-viewforum-sql-injection(23514) vdb-entry