Lucene search
HistoryNov 16, 2005 - 7:42 a.m.
CVE-2005-3543
cve-2005-3543
sql injection
phorum
security vulnerability
register_globals
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.1%
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter.
Affected configurations
Node
phorumphorumMatch5.0.0_alpha
ORphorumphorumMatch5.0.1_alpha
ORphorumphorumMatch5.0.2_alpha
ORphorumphorumMatch5.0.3_beta
ORphorumphorumMatch5.0.4_beta
ORphorumphorumMatch5.0.4a_beta
ORphorumphorumMatch5.0.5_beta
ORphorumphorumMatch5.0.6_beta
ORphorumphorumMatch5.0.7_beta
ORphorumphorumMatch5.0.7a_beta
ORphorumphorumMatch5.0.8_rc
ORphorumphorumMatch5.0.9
ORphorumphorumMatch5.0.10
ORphorumphorumMatch5.0.11
ORphorumphorumMatch5.0.12
ORphorumphorumMatch5.0.13
ORphorumphorumMatch5.0.13a
ORphorumphorumMatch5.0.14
ORphorumphorumMatch5.0.14a
ORphorumphorumMatch5.0.15
ORphorumphorumMatch5.0.16
ORphorumphorumMatch5.0.17
ORphorumphorumMatch5.0.18
ORphorumphorumMatch5.0.19
ORphorumphorumMatch5.0.20
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.1%
Related for CVE-2005-3543