CVE-2005-2058

Опубликовано: 29 июн. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.

Ссылки

http://marc.info/?l=bugtraq&m=111963737202040&w=2
http://www.gulftech.org/?node=research&article_id=00084-06232005
Exploit
Patch
Vendor Advisory
http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
Patch
http://marc.info/?l=bugtraq&m=111963737202040&w=2
http://www.gulftech.org/?node=research&article_id=00084-06232005
Exploit
Patch
Vendor Advisory
http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/42351/Main/42351/#Post42351
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ubbcentral:ubb.threads:6.5.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.0054

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9q4j-627x-95w7

github

почти 4 года назад