NuytsTech Security

CVE-2005-4619

by ·

SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method.

Date published : 2006-01-05

http://www.securityfocus.com/bid/16131

http://pridels0.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html

Tags: