Back
CVE-2005-4218
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585.
Published: Dec 14, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| phpwebthings | phpwebthings | 1.4 |
GitHub Security Advisory GHSA-w8j8-w96c-962r
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute...
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
2.43%
Top 17% most likely to be exploited
Threat Score
30.7 / 100
Data Sources
NVD
EPSS
GitHub