CVE-2005-3045

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112741430006983&w=2
http://rgod.altervista.org/mylittle15_16b.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16913/Vendor Advisory
http://www.securityfocus.com/bid/14908Exploit
http://marc.info/?l=bugtraq&m=112741430006983&w=2
http://rgod.altervista.org/mylittle15_16b.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16913/Vendor Advisory
http://www.securityfocus.com/bid/14908Exploit

Timeline

Published: Sep 24, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-30466.8SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privilege CVE-2005-30474.3Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the CVE-2005-30486.4Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP fi CVE-2005-30495.0PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote CVE-2005-30505.0PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path CVE-2005-30519.3Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Sea CVE-2005-30527.5SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search CVE-2005-30532.1The sys_set_mempolicy function in mempolicy.c in Linux kernel 2.6.x allows local users to cause a denial of service (kernel BUG()) via a neg CVE-2005-30542.1fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir dir CVE-2005-30552.1Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service (kernel OOPS) via a userspace process that issues a USB Req CVE-2005-30569.8TWiki allows arbitrary shell command execution via the Include function CVE-2005-305710.0The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass