CVE-2005-0676: Phpoutsourcing Zorum

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.

Affected products

• Phpoutsourcing Zorum: version 3.5 only

Published 2005-05-04. Last modified 2026-06-16.