CVE-2005-4159

NOTE: this issue has been disputed by the vendor and third parties

published December 11, 2005

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an "invalid SQL syntax error." Multiple followups support the vendor

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01377 · 71.9th percentile
Published
2005-12-11T11:00Z
EPSS history
Timeline
  • 11 DEC 11:00Z
    NOTE: this issue has been disputed by the vendor and third parties
    cvelistv5