VULNERABILITY INTELLIGENCE

CVE-2005-3394

CVSS score7.5 HIGH
EPSS probability1.28%
CISA KEVNot currently listed
Published2005-11-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module.

Primary references