CVE-2005-4619 SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpoutsourcing zorum | = 3.0 | No fix listed |
| phpoutsourcing zorum | = 3.1 | No fix listed |
| phpoutsourcing zorum | = 3.2 | No fix listed |
| phpoutsourcing zorum | = 3.3 | No fix listed |
| phpoutsourcing zorum | = 3.4 | No fix listed |
| phpoutsourcing zorum | = 3.5 | No fix listed |
References
- pridels0.blogspot.com
- 21372 exploit vdb-entry
- 16131 exploit vdb-entry