CVE-2005-3816

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-26 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter or (2) thread parameter in thread mode.

Affected products

Zoneo-Soft Freeforum: through 1.1

References

http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html
http://secunia.com/advisories/17720
http://securitytracker.com/id?1015269
http://www.osvdb.org/21086
http://www.securityfocus.com/bid/15559
http://www.vupen.com/english/advisories/2005/2571
http://pridels0.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html
http://secunia.com/advisories/17720
http://securitytracker.com/id?1015269
http://www.osvdb.org/21086
http://www.securityfocus.com/bid/15559
http://www.vupen.com/english/advisories/2005/2571

Get alerted when CVE-2005-3816 or the next vulnerability affects your stack