CVE-2005-3518

Опубликовано: 06 нояб. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter.

Ссылки

http://marc.info/?l=bugtraq&m=112939699128430&w=2
http://secunia.com/advisories/17227/
Patch
Vendor Advisory
http://securityreason.com/securityalert/87
http://www.kapda.ir/advisory-91.html
Exploit
Vendor Advisory
http://www.osvdb.org/20018
http://www.punbb.org/changelogs/1.2.8_to_1.2.9.txt
http://www.securityfocus.net/bid/15114/
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22760
http://marc.info/?l=bugtraq&m=112939699128430&w=2
http://secunia.com/advisories/17227/
Patch
Vendor Advisory
http://securityreason.com/securityalert/87
http://www.kapda.ir/advisory-91.html
Exploit
Vendor Advisory
http://www.osvdb.org/20018
http://www.punbb.org/changelogs/1.2.8_to_1.2.9.txt
http://www.securityfocus.net/bid/15114/
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22760

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01501

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4prh-gp9w-7r2w

github

почти 4 года назад