Vulnerability Description
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2) ForumID, (3) Thread, and (4) ThreadID parameters in view_thread.cfm.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cfmagic | Magic Forum Personal | <= 2.5 |
Related Weaknesses (CWE)
References
- http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html
- http://secunia.com/advisories/17935Vendor Advisory
- http://www.osvdb.org/21501
- http://www.osvdb.org/21502
- http://www.securityfocus.com/bid/15774
- http://www.vupen.com/english/advisories/2005/2794Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23514
- http://pridels0.blogspot.com/2005/12/magic-forum-personal-sqlxss-vuln.html
- http://secunia.com/advisories/17935Vendor Advisory
- http://www.osvdb.org/21501
- http://www.osvdb.org/21502
- http://www.securityfocus.com/bid/15774
- http://www.vupen.com/english/advisories/2005/2794Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23514
FAQ
What is CVE-2005-4071?
CVE-2005-4071 is a vulnerability with a CVSS score of 7.5 (HIGH). Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2)...
How severe is CVE-2005-4071?
CVE-2005-4071 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4071?
Check the references section above for vendor advisories and patch information. Affected products include: Cfmagic Magic Forum Personal.