CVEvulnerability
CVE-2005-0569
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language parameter to register.php, (2) change email feature in profile.php, (3) posts or (4) topics parameter to moderate.php.
Affected configurations
• punbb punbb 1.2.1
References
- http://marc.info/?l=bugtraq&m=110927754230666&w=2 marc.info
- http://secunia.com/advisories/14394 Patch, Vendor Advisory
- http://secunia.com/advisories/14538 Patch, Vendor Advisory
- http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt www.punbb.org
- http://www.securityfocus.com/bid/12652 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19473 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=110927754230666&w=2 marc.info
- http://secunia.com/advisories/14394 Patch, Vendor Advisory
- http://secunia.com/advisories/14538 Patch, Vendor Advisory
- http://www.punbb.org/changelogs/1.2.1_to_1.2.2.txt www.punbb.org
- http://www.securityfocus.com/bid/12652 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19473 exchange.xforce.ibmcloud.com