CVE-2005-3536: SQL Injection
Published Dec 22, 2005
·Updated
SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type.
Affected Software
27 affected components
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.13
Phpbb Group Phpbb=2.0.16
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.12
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.14
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0.15
Phpbb Group Phpbb=2.0_rc4
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0.17
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_beta1
Remediation
Patch Available
Patch Available
Event History
Dec 22, 2005
CVE Published
11:03 PM
Dec 23, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3536?
The CVE-2005-3536 vulnerability is classified as high severity due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2005-3536?
To fix CVE-2005-3536, upgrade your phpBB installation to version 2.0.18 or later.
3
Which versions of phpBB are affected by CVE-2005-3536?
CVE-2005-3536 affects phpBB versions 2.0.0 to 2.0.17.
4
What type of vulnerability is CVE-2005-3536?
CVE-2005-3536 is an SQL injection vulnerability that can be exploited by attackers.
5
Can CVE-2005-3536 be exploited remotely?
Yes, CVE-2005-3536 can be exploited remotely, allowing attackers to manipulate the SQL queries of the phpBB application.