Multiple SQL injection vulnerabilities in Quick.Forum 2.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) iCategory or (2) page parameter to index.php, or (3) iCategory parameter in the query string to the forum directory.
References
Link | Resource |
---|---|
http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html | Exploit Vendor Advisory |
http://secunia.com/advisories/15200 | Vendor Advisory |
http://www.osvdb.org/16326 | Vendor Advisory |
http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html | Exploit Vendor Advisory |
http://secunia.com/advisories/15200 | Vendor Advisory |
http://www.osvdb.org/16326 | Vendor Advisory |
Configurations
History
20 Nov 2024, 23:57
Type | Values Removed | Values Added |
---|---|---|
References | () http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html - Exploit, Vendor Advisory | |
References | () http://secunia.com/advisories/15200 - Vendor Advisory | |
References | () http://www.osvdb.org/16326 - Vendor Advisory |
Information
Published : 2005-05-11 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-1585
Mitre link : CVE-2005-1585
CVE.ORG link : CVE-2005-1585
JSON object : View
Products Affected
open_solution
- quick.forum
CWE