CVE-2005-1287

BK Forum 4.0 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.