high7.5Public exploit code
CVE-2005-4259
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in topic.asp, (2) FORUM_…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection2005-12-14 · webapps · asp · Verified
- ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection2005-12-14 · webapps · asp · Verified
- ASPBB 0.4 - 'topic.asp?TID' SQL Injection2005-12-14 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) TID parameter in topic.asp, (2) FORUM_ID parameter in forum.asp, and (3) PROFILE_ID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aspbb | Aspbb | Version 0.4 |