7.5
CVE-2006-3332
- EPSS 1.19%
- Veröffentlicht 30.06.2006 23:05:00
- Zuletzt bearbeitet 16.06.2026 22:26:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpoutsourcing ≫ Zorum Version3.0
Phpoutsourcing ≫ Zorum Version3.1
Phpoutsourcing ≫ Zorum Version3.2
Phpoutsourcing ≫ Zorum Version3.3
Phpoutsourcing ≫ Zorum Version3.4
Phpoutsourcing ≫ Zorum Version3.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.19% | 0.639 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html
http://securitytracker.com/id?1016386
http://www.securityfocus.com/bid/18681
https://exchange.xforce.ibmcloud.com/vulnerabilities/24372