CVE-2005-4891: SQL Injection
Published Jan 15, 2020
·Updated
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
Affected Software
1 affected component
SimpleMachines Simple Machine Forum<=1.0.4
Event History
Jan 15, 2020
CVE Published
05:15 PM
CVE Published
via MITRE·09:09 PM
Data Sourced
via MITRE·09:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for Simple Machine Forum?
The vulnerability ID for Simple Machine Forum is CVE-2005-4891.
2
What is the severity level of CVE-2005-4891?
The severity level of CVE-2005-4891 is critical with a score of 9.8.
3
What is the affected software version for CVE-2005-4891?
The affected software version for CVE-2005-4891 is Simple Machine Forum versions 1.0.4 and earlier.
4
How does the SQL injection vulnerability in Simple Machine Forum work?
The SQL injection vulnerability in Simple Machine Forum allows remote attackers to inject arbitrary SQL statements.
5
Are there any references about CVE-2005-4891?
Yes, you can find references about CVE-2005-4891 at http://www.openwall.com/lists/oss-security/2012/11/14/10 and https://securiteam.com/exploits/5HP0N0KG0O/.