CVE-2005-1051

SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a changeemail action...

CVE-2005-1051

CVE-2005-1051 affects PunBB 1.2.4: a SQL injection in profile.php via the id parameter in the change_email action. The vulnerability requires an authenticated remote user and allows arbitrary SQL execution, with reported potential for modification of database queries and administrative access. Do...

CVE-2005-1051

SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a changeemail action...

PunBB 1.2.4 - 'id' SQL Injection

!/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database is still user-supplied data import...