Unrated severityNVD Advisory· Published Nov 16, 2005· Updated Apr 16, 2026
CVE-2005-3543
CVE-2005-3543
Description
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter.
Affected products
25cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:phorum:phorum:5.0.0_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.13a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.14a:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.1_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.2_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.4a_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.4_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.5_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.6_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.7a_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.8_rc:*:*:*:*:*:*:*
- cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/17456nvdPatchVendor Advisory
- www.waraxe.us/advisory-43.htmlnvdExploitPatchVendor Advisory
- marc.infonvd
- phorum.org/story.phpnvd
- securityreason.com/securityalert/153nvd
- www.osvdb.org/20524nvd
- www.vupen.com/english/advisories/2005/2332nvd
News mentions
0No linked articles in our index yet.