CVE-2005-4218

Phpwebthings - SQL Injection

Title source: rule

Description

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585.

Exploits (2)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1324

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by AhLam · perlwebappsphp

https://www.exploit-db.com/exploits/1325

View Code ZIP pw:eip

References (3)

[Exploit] http://rgod.altervista.org/phpwebth14_xpl.html

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1324

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/15465

Scores

EPSS 0.0059

EPSS Percentile 69.2%

Details

Status published

Products (1)

phpwebthings/phpwebthings 1.4

Published Dec 14, 2005

Tracked Since Feb 18, 2026