Lucene search

[email protected]CVE-2005-2193

HistoryJul 11, 2005 - 4:00 a.m.

CVE-2005-2193

2005-07-1104:00:00

[email protected]

web.nvd.nist.gov

cve-2005-2193

sql injection

user profile edit module

punbb 1.2.5

remote attackers

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.8%

JSON

SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.

Affected configurations

NVD

Node

punbbpunbbMatch1.0

punbbpunbbMatch1.0.1

punbbpunbbMatch1.0_alpha

punbbpunbbMatch1.0_beta1

punbbpunbbMatch1.0_beta2

punbbpunbbMatch1.0_beta3

punbbpunbbMatch1.0_rc1

punbbpunbbMatch1.0_rc2

punbbpunbbMatch1.1

punbbpunbbMatch1.1.1

punbbpunbbMatch1.1.2

punbbpunbbMatch1.1.3

punbbpunbbMatch1.1.4

punbbpunbbMatch1.1.5

punbbpunbbMatch1.2.1

punbbpunbbMatch1.2.2

punbbpunbbMatch1.2.3

punbbpunbbMatch1.2.4

CPENameOperatorVersion
punbb:punbbpunbbeq1.0
punbb:punbbpunbbeq1.0.1
punbb:punbbpunbbeq1.0_alpha
punbb:punbbpunbbeq1.0_beta1
punbb:punbbpunbbeq1.0_beta2
punbb:punbbpunbbeq1.0_beta3
punbb:punbbpunbbeq1.0_rc1
punbb:punbbpunbbeq1.0_rc2
punbb:punbbpunbbeq1.1
punbb:punbbpunbbeq1.1.1

CPE	Name	Operator	Version
punbb:punbb	punbb	eq	1.0
punbb:punbb	punbb	eq	1.0.1
punbb:punbb	punbb	eq	1.0_alpha
punbb:punbb	punbb	eq	1.0_beta1
punbb:punbb	punbb	eq	1.0_beta2
punbb:punbb	punbb	eq	1.0_beta3
punbb:punbb	punbb	eq	1.0_rc1
punbb:punbb	punbb	eq	1.0_rc2
punbb:punbb	punbb	eq	1.1
punbb:punbb	punbb	eq	1.1.1

Rows per page:

1-10 of 181

References

marc.info/?l=bugtraq&m=112084384928950&w=2

www.hardened-php.net/advisory-082005.php

www.punbb.org/

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for CVE-2005-2193

nvd1 nessus1 cvelist1