7.5
CVE-2005-3682
- EPSS 4.03%
- Veröffentlicht 18.11.2005 23:03:00
- Zuletzt bearbeitet 16.06.2026 22:17:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wizz Forum ≫ Wizz Forum Version1.20
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.03% | 0.893 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://marc.info/?l=bugtraq&m=113201564319843&w=2
http://secunia.com/advisories/17548/
http://securityreason.com/securityalert/181
http://www.osvdb.org/20845
http://www.osvdb.org/20846
http://www.osvdb.org/20847
http://www.securityfocus.com/bid/15410/references
http://www.vupen.com/english/advisories/2005/2421
https://exchange.xforce.ibmcloud.com/vulnerabilities/23170
https://exchange.xforce.ibmcloud.com/vulnerabilities/23171