CVE-2005-3871

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...

CVE-2005-3871

CVE-2005-3871 concerns multiple SQL injection vulnerabilities in Joels Bulletin Board (JBB) v0.9.9rc3 and earlier. The flaws allow remote attackers to inject SQL via (1) nr in topiczeigen.php, (2) forum and (3) zeigeseite in showforum.php, (4) forum in newtopic.php, and (5) tidnr in neuerbeitrag....