CVE-2005-3585

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

CVE-2005-3584

CVE-2005-3584 is a cross-site scripting (XSS) vulnerability in PhpWebThings 1.4.4, exploitable through forum.php via the forum parameter. The underlying issue is insufficient input sanitization for that parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected doc...

CVE-2005-3585

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...