Vulnerability Description
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| W2B | Phpforumpro | <= 2.2 |
References
- http://secunia.com/advisories/17915Vendor Advisory
- http://www.osvdb.org/21484
- http://www.securityfocus.com/bid/15736
- http://www.vupen.com/english/advisories/2005/2764
- http://secunia.com/advisories/17915Vendor Advisory
- http://www.osvdb.org/21484
- http://www.securityfocus.com/bid/15736
- http://www.vupen.com/english/advisories/2005/2764
FAQ
What is CVE-2005-4088?
CVE-2005-4088 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.
How severe is CVE-2005-4088?
CVE-2005-4088 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-4088?
Check the references section above for vendor advisories and patch information. Affected products include: W2B Phpforumpro.