{"api_version":"1","generated_at":"2026-07-23T09:56:11+00:00","cve":"CVE-2005-0413","urls":{"html":"https://cve.report/CVE-2005-0413","api":"https://cve.report/api/cve/CVE-2005-0413.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0413","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0413"},"summary":{"title":"CVE-2005-0413","description":"Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php.  NOTE: it was later reported that vector 2 exists in 3.0 and earlier.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-04-27 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/27083","name":"http://www.securityfocus.com/bid/27083","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MyPHP Forum 'faq.php' and 'member.php' Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19272","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19272","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/lists/bugtraq/2005/Feb/0125.html","name":"http://seclists.org/lists/bugtraq/2005/Feb/0125.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bugtraq: Several SQL injection bugs in myPHP Forum v.1.0","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1013136","name":"http://securitytracker.com/id?1013136","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"SecurityTracker.com Archives - MyPHP Forum Input Validation Holes Let Remote Users Inject SQL Commands","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/4822","name":"https://www.exploit-db.com/exploits/4822","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MyPHP Forum 3.0 (Final) - Multiple SQL Injections - PHP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/14205","name":"http://secunia.com/advisories/14205","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - MyPHP Forum Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39348","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39348","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/12501","name":"http://www.securityfocus.com/bid/12501","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"MyPHP Forum Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0413","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0413","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"413","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"myphp_forum","cpe5":"myphp_forum","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"413","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"myphp_forum","cpe5":"myphp_forum","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"413","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"myphp_forum","cpe5":"myphp_forum","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:13:53.791Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"12501","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/12501"},{"name":"4822","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/4822"},{"name":"27083","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/27083"},{"name":"myphpforum-multiple-sql-injection(19272)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19272"},{"name":"20050209 Several SQL injection bugs in myPHP Forum v.1.0","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://seclists.org/lists/bugtraq/2005/Feb/0125.html"},{"name":"1013136","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013136"},{"name":"myphpforum-member-sql-injection(39348)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39348"},{"name":"14205","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/14205"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-02-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php.  NOTE: it was later reported that vector 2 exists in 3.0 and earlier."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-10-10T00:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"12501","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/12501"},{"name":"4822","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/4822"},{"name":"27083","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/27083"},{"name":"myphpforum-multiple-sql-injection(19272)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19272"},{"name":"20050209 Several SQL injection bugs in myPHP Forum v.1.0","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://seclists.org/lists/bugtraq/2005/Feb/0125.html"},{"name":"1013136","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013136"},{"name":"myphpforum-member-sql-injection(39348)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39348"},{"name":"14205","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/14205"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0413","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php.  NOTE: it was later reported that vector 2 exists in 3.0 and earlier."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"12501","refsource":"BID","url":"http://www.securityfocus.com/bid/12501"},{"name":"4822","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/4822"},{"name":"27083","refsource":"BID","url":"http://www.securityfocus.com/bid/27083"},{"name":"myphpforum-multiple-sql-injection(19272)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19272"},{"name":"20050209 Several SQL injection bugs in myPHP Forum v.1.0","refsource":"BUGTRAQ","url":"http://seclists.org/lists/bugtraq/2005/Feb/0125.html"},{"name":"1013136","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013136"},{"name":"myphpforum-member-sql-injection(39348)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/39348"},{"name":"14205","refsource":"SECUNIA","url":"http://secunia.com/advisories/14205"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0413","datePublished":"2005-02-14T05:00:00.000Z","dateReserved":"2005-02-14T00:00:00.000Z","dateUpdated":"2024-08-07T21:13:53.791Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-04-27 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphp_forum:myphp_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0AF9BC75-9F03-4398-BC6B-7D02B1753B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp_forum:myphp_forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7471B313-A6A2-4D1B-BE21-CB14A20F1400"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphp_forum:myphp_forum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5B9CD454-EFE4-4F73-A25E-B9012DFCCAAC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"413","Ordinal":"1","Title":"CVE-2005-0413","CVE":"CVE-2005-0413","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"413","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php.  NOTE: it was later reported that vector 2 exists in 3.0 and earlier.","Type":"Description","Title":"CVE-2005-0413"},{"CveYear":"2005","CveId":"413","Ordinal":"2","NoteData":"2005-02-14","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"413","Ordinal":"3","NoteData":"2017-10-09","Type":"Other","Title":"Modified"}]}}}