Back

CVE-2005-4218

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585.

Published: Dec 14, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
phpwebthings phpwebthings 1.4

GitHub Security Advisory GHSA-w8j8-w96c-962r

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.43%

Top 17% most likely to be exploited

Threat Score 30.7 / 100

Data Sources

NVD EPSS GitHub