CVE-2005-4030

SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.

Score

CVSS 2.0 5.1 Medium

Status

Modified - cve@mitre.org

Published

2005-12-06

Last modified

2024-08-07

Affected products

• Quicksilver Forums (Quicksilver Forums)

References

• http://secunia.com/advisories/17861
• http://sourceforge.net/project/shownotes.php?release_id=375970&group_id=154354
• http://www.osvdb.org/21443
• http://www.securityfocus.com/bid/15710
• http://www.vupen.com/english/advisories/2005/2729