CVE-2005-3682

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-18 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via (1) the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in (2) ForumTopicDetails.php and (3) ForumReply.php.

Affected products

Wizz Forum: 1.20

References

http://marc.info/?l=bugtraq&m=113201564319843&w=2
http://secunia.com/advisories/17548/
http://securityreason.com/securityalert/181
http://www.osvdb.org/20845
http://www.osvdb.org/20846
http://www.osvdb.org/20847
http://www.securityfocus.com/bid/15410/references
http://www.vupen.com/english/advisories/2005/2421
https://exchange.xforce.ibmcloud.com/vulnerabilities/23170
https://exchange.xforce.ibmcloud.com/vulnerabilities/23171
http://marc.info/?l=bugtraq&m=113201564319843&w=2
http://secunia.com/advisories/17548/

Get alerted when CVE-2005-3682 or the next vulnerability affects your stack