{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-26T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "18681", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18681"}, {"name": "zorum-index-sql-injection(24372)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24372"}, {"tags": ["x_refsource_MISC"], "url": "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html"}, {"name": "1016386", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016386"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3332", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "18681", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18681"}, {"name": "zorum-index-sql-injection(24372)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24372"}, {"name": "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html", "refsource": "MISC", "url": "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html"}, {"name": "1016386", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016386"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3332", "datePublished": "2006-06-30T23:00:00", "dateReserved": "2006-06-30T00:00:00", "dateUpdated": "2017-07-19T15:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "5C2D033F-18B3-49C1-9EF3-347685F12E83", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "70AE9137-3FC1-4B5A-B460-D46DF8E041B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "907D1B87-2347-4B70-A045-0DDF93662A07", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.3:*:*:*:*:*:*:*", "matchCriteriaId": "ACB559F1-D8A6-4265-963C-1265FC7997A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.4:*:*:*:*:*:*:*", "matchCriteriaId": "EEE0A89A-6DB5-482F-985C-C314DC4D5E28", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpoutsourcing:zorum:3.5:*:*:*:*:*:*:*", "matchCriteriaId": "D7D1D438-86A5-4224-852F-EC1E5DB83DC4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en index.php en Zorum Forum v3.5 permite a atacantes remotos ejecutar comandos SQL a trav\u00e9s de los par\u00e1metros (1)offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, y (6) fromfromlist"}], "id": "CVE-2006-3332", "lastModified": "2017-07-20T01:32:14.820", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-06-30T23:05:00.000", "references": [{"source": "cve@mitre.org", "url": "http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016386"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18681"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24372"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}