Lucene search
HistorySep 20, 2005 - 12:03 a.m.
CVE-2005-2989
cve-2005-2989
sql injection
deluxebb
remote attackers
nvd
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.5%
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| deluxebb:deluxebb | deluxebb | eq | 1.05 |
| deluxebb:deluxebb | deluxebb | eq | 1.0 |
Related
openvas
openvas
DeluxeBB Multiple SQL injection flaws
2006-03-26 00:00:00
nessus
nessus
DeluxeBB Multiple Scripts SQL Injection
2005-09-19 00:00:00
prion
prion
cve
cve
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.5%
Related for CVE-2005-2989