CVE-2005-3816

Published: Nov 26, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter in thread mode.

Affected (1)

Products: Zoneo Soft: Freeforum

Zoneo Soft

1 product

Freeforum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Zoneo Soft Freeforum	Up to 1.1

References (12)

http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html

Source: cve@mitre.org

http://secunia.com/advisories/17720

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015269

Source: cve@mitre.org

http://www.osvdb.org/21086

Source: cve@mitre.org

http://www.securityfocus.com/bid/15559

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2571

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html