CVE-2005-4159

** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an "invalid SQL syntax error." Multiple followups support the vendor.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/15791
http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/23546
http://www.securityfocus.com/archive/1/419535/100/0/threaded
http://www.securityfocus.com/archive/1/419250/100/0/threaded
http://www.securityfocus.com/archive/1/419105/100/0/threaded
http://www.securityfocus.com/archive/1/419068/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*

Information

Published : 2005-12-11 03:03

Updated : 2018-10-19 08:40

NVD link : CVE-2005-4159

Mitre link : CVE-2005-4159

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

simple_machines

simple_machines_forum

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/15791", "name": "15791", "tags": [], "refsource": "BID"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html", "name": "20051209 SMF SQL Injection", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23546", "name": "smf-memberlist-sql-injection(23546)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/419535/100/0/threaded", "name": "20051213 Re: Re: Re: [KAPDA::#16] - SMF SQL Injection", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/419250/100/0/threaded", "name": "20051211 Re: Re: [KAPDA::#16] - SMF SQL Injection", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/419105/100/0/threaded", "name": "20051210 Re: [KAPDA::#16] - SMF SQL Injection", "tags": [], "refsource": "BUGTRAQ"}, {"url": "http://www.securityfocus.com/archive/1/419068/100/0/threaded", "name": "20051209 [KAPDA::#16] - SMF SQL Injection", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an \"invalid SQL syntax error.\" Multiple followups support the vendor."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-4159", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2005-12-11T11:03Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.1_rc1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-19T15:40Z"}