CVE-2005-3419

Опубликовано: 01 нояб. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.16:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*

cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01314

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3419

ubuntu

почти 20 лет назад

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized.

CVE-2005-3419

debian

почти 20 лет назад

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 all ...

GHSA-frcq-2xc3-4qgx

github

больше 3 лет назад

SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized.

EPSS

Процентиль: 79%

0.01314

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other