CVE-2005-3740

Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php.

• http://myblog.it-security23.net/advisories/advisory-6.txtExploit, Vendor Advisory
• http://seclists.org/lists/bugtraq/2005/Nov/0232.htmlExploit, Vendor Advisory
• http://seclists.org/lists/bugtraq/2005/Nov/0237.html
• http://secunia.com/advisories/17664Patch, Vendor Advisory
• http://www.osvdb.org/20991
• http://www.osvdb.org/20992
• http://www.securityfocus.com/bid/15502
• http://www.vupen.com/english/advisories/2005/2504
• http://myblog.it-security23.net/advisories/advisory-6.txtExploit, Vendor Advisory
• http://seclists.org/lists/bugtraq/2005/Nov/0232.htmlExploit, Vendor Advisory
• http://seclists.org/lists/bugtraq/2005/Nov/0237.html
• http://secunia.com/advisories/17664Patch, Vendor Advisory
• http://www.osvdb.org/20991
• http://www.osvdb.org/20992
• http://www.securityfocus.com/bid/15502
• http://www.vupen.com/english/advisories/2005/2504

Published

Nov 22, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3734Cross-site scripting (XSS) vulnerability in the "add content…
• CVE-2005-3735Multiple SQL injection vulnerabilities in e-Quick Cart allow…
• CVE-2005-3736Multiple cross-site scripting (XSS) vulnerabilities in e-Qui…
• CVE-2005-3737Buffer overflow in the SVG importer (style.cpp) of inkscape …
• CVE-2005-3738globals.php in Mambo Site Server 4.0.14 and earlier, when re…
• CVE-2005-3739Unspecified vulnerability in subheader.php in PHP-Fusion 6.0…
• CVE-2005-3741Almond Classifieds does not properly verify the password, wh…
• CVE-2005-3742Cross-site scripting (XSS) vulnerability in popup.php in Adv…
• CVE-2005-3743SQL injection vulnerability in results.php in SimplePoll all…
• CVE-2005-3744SQL injection vulnerability in index.php in phpComasy 0.7.5 …
• CVE-2005-3745Cross-site scripting (XSS) vulnerability in Apache Struts 1.…
• CVE-2005-3746SQL injection vulnerability in thread.php in APBoard allows …