Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2005-0676 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
CVE-2005-0677 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
CVE-2005-2651 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.