CVE-2005-3543: Phorum

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the forum_ids parameter.

Affected products

• Phorum Phorum: version 5.0.0_alpha only; version 5.0.1_alpha only; version 5.0.2_alpha only; version 5.0.3_beta only; version 5.0.4_beta only; version 5.0.4a_beta only; …

Published 2005-11-16. Last modified 2026-06-16.