CVE

Id
11619  
CVE No.
CVE-2005-0413  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.  
Phase
Assigned (20050214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
83106 11619 CVE-2005-0413 BUGTRAQ:20050209 Several SQL injection bugs in myPHP Forum v.1.0  View
83107 11619 CVE-2005-0413 URL:http://seclists.org/lists/bugtraq/2005/Feb/0125.html  View
83108 11619 CVE-2005-0413 MILW0RM:4822  View
83109 11619 CVE-2005-0413 URL:http://www.milw0rm.com/exploits/4822  View
83110 11619 CVE-2005-0413 BID:12501  View
83111 11619 CVE-2005-0413 URL:http://www.securityfocus.com/bid/12501  View
83112 11619 CVE-2005-0413 BID:27083  View
83113 11619 CVE-2005-0413 URL:http://www.securityfocus.com/bid/27083  View
83114 11619 CVE-2005-0413 SECTRACK:1013136  View
83115 11619 CVE-2005-0413 URL:http://securitytracker.com/id?1013136  View
83116 11619 CVE-2005-0413 SECUNIA:14205  View
83117 11619 CVE-2005-0413 URL:http://secunia.com/advisories/14205  View
83118 11619 CVE-2005-0413 XF:myphpforum-multiple-sql-injection(19272)  View
83119 11619 CVE-2005-0413 URL:http://xforce.iss.net/xforce/xfdb/19272  View
83120 11619 CVE-2005-0413 XF:myphpforum-member-sql-injection(39348)  View

Related JVN