CVE-2005-4619

Published: Dec 31, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.

Affected (6)

Products: Phpoutsourcing: Zorum

Phpoutsourcing

1 product

Zorum

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Phpoutsourcing Zorum	Version 3.0
Phpoutsourcing Zorum	Version 3.1
Phpoutsourcing Zorum	Version 3.2
Phpoutsourcing Zorum	Version 3.3
Phpoutsourcing Zorum	Version 3.4
Phpoutsourcing Zorum	Version 3.5