CVE-2005-0413

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.

• CWE-89

• http://seclists.org/lists/bugtraq/2005/Feb/0125.htmlExploit
• http://secunia.com/advisories/14205Vendor Advisory
• http://securitytracker.com/id?1013136Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/12501
• http://www.securityfocus.com/bid/27083
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19272
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39348
• https://www.exploit-db.com/exploits/4822
• http://seclists.org/lists/bugtraq/2005/Feb/0125.htmlExploit
• http://secunia.com/advisories/14205Vendor Advisory
• http://securitytracker.com/id?1013136Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/12501
• http://www.securityfocus.com/bid/27083
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19272
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39348
• https://www.exploit-db.com/exploits/4822

Published

Apr 27, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0407Cross-site scripting (XSS) vulnerability in Openconf 1.04, a…
• CVE-2005-0408CitrusDB 0.3.6 and earlier generates easily predictable MD5 …9.8
• CVE-2005-0409CitrusDB 0.3.6 and earlier does not verify authorization for…
• CVE-2005-0410SQL injection vulnerability in importcc.php for CitrusDB 0.3…
• CVE-2005-0411Directory traversal vulnerability in index.php for CitrusDB …
• CVE-2005-0412Cross-site scripting (XSS) vulnerability in Spidean PostWrap…
• CVE-2005-0414SQL injection vulnerability in post.php for MercuryBoard 1.1…
• CVE-2005-0415Multiple memory leaks in the MQL parser in Emdros before 1.1…
• CVE-2005-0416The Windows Animated Cursor (ANI) capability in Windows NT, …
• CVE-2005-0417Unknown "high risk" vulnerability in DB2 Universal Database …
• CVE-2005-0418Argument injection vulnerability in Java Web Start for J2SE …
• CVE-2005-0419Multiple heap-based buffer overflows in 3Com 3CServer allow …