Back to search
CVE-2005-3872
Published: Nov 29, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID parameter in forum.php, and the (2) TOPIC_ID, (3) FORUM_ID, and (4) CAT_ID parameters in topic.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
15591
vdb-entry
x_refsource_BID
21152
vdb-entry
x_refsource_OSVDB
17734
third-party-advisory
x_refsource_SECUNIA
ADV-2005-2619
vdb-entry
x_refsource_VUPEN
21153
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now