CVE-2005-0677
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by...
CVE-2005-0677 is a medium vulnerability (CVSS 5.0) in Phpoutsourcing Zorum, published March 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 65th percentile. No source names a fixed version.
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
Exploit likelihood
What each source reports
NVD Score used
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
- Record
CVE-2005-0677- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
- Record
CVE-2005-0677- Updated
- 2026-11-02
EUVDEUVD-2005-0678 No score
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
- Record
EUVD-2005-0678- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6qr9-j4h4-c8wj No score
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by...
index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter.
- Record
GHSA-6qr9-j4h4-c8wj- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |