medium6.5Public exploit code
CVE-2005-1051
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PunBB 1.2.4 - 'id' SQL Injection2005-04-11 · webapps · php · Verified
Impact
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Punbb | Punbb | Versions 1.0, 1.0.1, 1.0_alpha, 1.0_beta1, 1.0_beta2, 1.0_beta3 |