Description (CNA)
SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/18681
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24372
- http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html
- http://securitytracker.com/id?1016386
ADP enrichment
No English description supplied.