Back

CVE-2005-4724

SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field in an HTTP header.

Published: Dec 31, 2005 Modified: Jun 16, 2026

CVSS Metrics

GitHub Security Advisory GHSA-pfwr-4phx-9q5j

SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.15%

Top 36% most likely to be exploited

Threat Score 30.3 / 100

Data Sources

NVD EPSS GitHub