PT-2005-4564 · Freeforum · Freeforum

Published 2005-11-26 · Updated 2011-03-08 · CVE-2005-3816

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions freeForum versions 1.1 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the cat parameter or the thread parameter in thread mode.

Recommendations For freeForum versions 1.1 and earlier, update to a version later than 1.1 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-3816

Affected Products

Freeforum

References · 8

• 🔥 https://exploit-db.com/exploits/26576 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3816 · Security Note
• http://secunia.com/advisories/17720 · Vendor Advisory
• http://securitytracker.com/id?1015269 · Note
• http://securityfocus.com/bid/15559 · Note
• http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html · Note
• http://osvdb.org/21086 · Note
• http://vupen.com/english/advisories/2005/2571 · Note