Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
CVE Informations
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Exploit information
Exploit Database EDB-ID : 26266
Publication date : 2005-09-14 22h00 +00:00
Author : abducter
EDB Verified : Yes
source: https://www.securityfocus.com/bid/14851/info
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
http://www.example.com/forums.php?fid=[code]
Exploit Database EDB-ID : 26265
Publication date : 2005-09-14 22h00 +00:00
Author : abducter
EDB Verified : Yes
source: https://www.securityfocus.com/bid/14851/info
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
http://www.example.com/misc.php?sub=profile&uid=[code]
Exploit Database EDB-ID : 26268
Publication date : 2005-09-14 22h00 +00:00
Author : abducter
EDB Verified : Yes
source: https://www.securityfocus.com/bid/14851/info
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
http://www.example.com/newpost.php?sub=newthread&fid=[code]
Exploit Database EDB-ID : 26267
Publication date : 2005-09-14 22h00 +00:00
Author : abducter
EDB Verified : Yes
source: https://www.securityfocus.com/bid/14851/info
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
http://www.example.com/pm.php?sub=newpm&uid=[code]
Exploit Database EDB-ID : 26264
Publication date : 2005-09-14 22h00 +00:00
Author : abducter
EDB Verified : Yes
source: https://www.securityfocus.com/bid/14851/info
DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries.
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
http://www.example.com/topic.php?tid=[code]
Products Mentioned
Configuraton 0
Deluxebb>>Deluxebb >> Version 1.0
Deluxebb>>Deluxebb >> Version 1.05
- Deluxebb>>Deluxebb >> Version 1.05 (Open CPE detail)
