NVD

Id
66171  
Name
CVE-2005-0413  
Description
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-04-27  
Modified Date
2017-07-10  
Seq
2005-0413  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344621 66171 CVE-2005-0413 20050209 Several SQL injection bugs in myPHP Forum v.1.0  View
344622 66171 CVE-2005-0413 1013136  View
344623 66171 CVE-2005-0413 4822  View
344624 66171 CVE-2005-0413 12501  View
344625 66171 CVE-2005-0413 27083  View
344626 66171 CVE-2005-0413 myphpforum-multiple-sql-injection(19272)  View
344627 66171 CVE-2005-0413 myphpforum-member-sql-injection(39348)  View

Related JVN