CVE

Id
15363  
CVE No.
CVE-2005-4159  
Status
Candidate  
Description
** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an "invalid SQL syntax error." Multiple followups support the vendor.  
Phase
Assigned (20051211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120230 15363 CVE-2005-4159 BUGTRAQ:20051209 [KAPDA::#16] - SMF SQL Injection  View
120231 15363 CVE-2005-4159 URL:http://www.securityfocus.com/archive/1/archive/1/419068/100/0/threaded  View
120232 15363 CVE-2005-4159 BUGTRAQ:20051210 Re: [KAPDA::#16] - SMF SQL Injection  View
120233 15363 CVE-2005-4159 URL:http://www.securityfocus.com/archive/1/archive/1/419105/100/0/threaded  View
120234 15363 CVE-2005-4159 BUGTRAQ:20051211 Re: Re: [KAPDA::#16] - SMF SQL Injection  View
120235 15363 CVE-2005-4159 URL:http://www.securityfocus.com/archive/1/archive/1/419250/100/0/threaded  View
120236 15363 CVE-2005-4159 BUGTRAQ:20051213 Re: Re: Re: [KAPDA::#16] - SMF SQL Injection  View
120237 15363 CVE-2005-4159 URL:http://www.securityfocus.com/archive/1/archive/1/419535/100/0/threaded  View
120238 15363 CVE-2005-4159 BUGTRAQ:20051209 SMF SQL Injection  View
120239 15363 CVE-2005-4159 URL:http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html  View
120240 15363 CVE-2005-4159 BID:15791  View
120241 15363 CVE-2005-4159 URL:http://www.securityfocus.com/bid/15791  View
120242 15363 CVE-2005-4159 XF:smf-memberlist-sql-injection(23546)  View

Related JVN