Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:01
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=112907535528616&w=2 - | |
References | () http://rgod.altervista.org/versatile100RC2.html - Exploit, Vendor Advisory | |
References | () http://secunia.com/advisories/17174/ - Vendor Advisory | |
References | () http://www.osvdb.org/19962 - | |
References | () http://www.osvdb.org/19963 - | |
References | () http://www.osvdb.org/19964 - | |
References | () http://www.osvdb.org/19965 - | |
References | () http://www.osvdb.org/19966 - | |
References | () http://www.osvdb.org/19967 - | |
References | () http://www.osvdb.org/19968 - | |
References | () http://www.securityfocus.com/bid/15068 - Exploit |
Information
Published : 2005-10-20 10:02
Updated : 2024-11-21 00:01
NVD link : CVE-2005-3259
Mitre link : CVE-2005-3259
CVE.ORG link : CVE-2005-3259
JSON object : View
Products Affected
versatilebulletinboard
- versatilebulletinboard
CWE