PT-2005-1886 · Coolforum · Coolforum

Published 2005-03-24 · Updated 2017-07-11 · CVE-2005-0858

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CoolForum versions 0.8 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different methods: (1) the pseudo parameter to "entete.php" or (2) the login parameter to "register.php".

Recommendations For CoolForum versions 0.8 and earlier, consider disabling the entete.php and register.php scripts until a patch is available to prevent exploitation via the pseudo and login parameters.

Exploit

Fix

Related Identifiers

CVE-2005-0858

Affected Products

Coolforum

References · 6

• 🔥 http://securityfocus.com/bid/12852 · Exploit
• 🔥 https://exploit-db.com/exploits/25240 · Exploit
• 🔥 http://securitytracker.com/id?1013474 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0858 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19759 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19761 · Note