Back

CVE-2005-3072

SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Published: Sep 27, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (12)

Vendor Product Version
interchange_development_group interchange 4.9.3
interchange_development_group interchange 4.9.4
interchange_development_group interchange 4.9.5
interchange_development_group interchange 4.9.6
interchange_development_group interchange 4.9.8
interchange_development_group interchange 4.9.9
interchange_development_group interchange 5.0
interchange_development_group interchange 5.0.1
interchange_development_group interchange 5.0.2
interchange_development_group interchange 5.1
interchange_development_group interchange 5.1.1
interchange_development_group interchange 5.2.0

GitHub Security Advisory GHSA-x8cp-8xjm-x5rm

SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.92%

Top 22% most likely to be exploited

Threat Score 30.6 / 100

Data Sources

NVD EPSS GitHub