CVE-2005-0413

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.1%

from disclosure to weapon0 days

Published on NVDFeb 14

1st PoCFeb 10

exploitation probability

2.1%top 20% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/807 cve_referencewww.exploit-db.com/exploits/4822unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://seclists.org/lists/bugtraq/2005/Feb/0125.html http://secunia.com/advisories/14205 http://securitytracker.com/id?1013136 https://exchange.xforce.ibmcloud.com/vulnerabilities/19272 https://exchange.xforce.ibmcloud.com/vulnerabilities/39348 https://www.exploit-db.com/exploits/4822 http://www.securityfocus.com/bid/12501 http://www.securityfocus.com/bid/27083