CVE-2011-5137

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-31 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the (1) TopicID parameter to viewtopic.php, the (2) BoardID parameter to viewboard.php, or (3) CatID parameter to viewcat.php.

Affected products

Tforum: b0.915

References

http://packetstormsecurity.org/files/view/108184/tforum-sqlxss.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/71975
http://packetstormsecurity.org/files/view/108184/tforum-sqlxss.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/71975

Get alerted when CVE-2011-5137 or the next vulnerability affects your stack