CVE-2005-3394

Description

Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/22932

http://www.vupen.com/english/advisories/2005/2258

http://www.securityfocus.com/archive/1/415299

http://www.osvdb.org/20420

http://secunia.com/advisories/17373

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS