CVE-2005-1051

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.

Ссылки

http://marc.info/?l=bugtraq&m=111306207306155&w=2
http://secunia.com/advisories/14882
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13071
Exploit
Patch
http://marc.info/?l=bugtraq&m=111306207306155&w=2
http://secunia.com/advisories/14882
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13071
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01046

Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9c26-35wc-9jmc

github

почти 4 года назад