high7.5
CVE-2005-2439
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the se…
Impact
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Usebb | Usebb | Versions 0.1, 0.1.1, 0.2, 0.2.1, 0.2.2, 0.2.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112264706213040&w=2
- http://www.hardened-php.net/advisory_122005.60.html
- http://www.securityfocus.com/bid/14413
- http://www.usebb.net/community/topic.php?id=605
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21652
- http://marc.info/?l=bugtraq&m=112264706213040&w=2
- http://www.hardened-php.net/advisory_122005.60.html
- http://www.securityfocus.com/bid/14413
- http://www.usebb.net/community/topic.php?id=605
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21652