Lucene search

[email protected]CVE-2005-3871

HistoryNov 29, 2005 - 11:03 a.m.

CVE-2005-3871

2005-11-2911:03:00

[email protected]

web.nvd.nist.gov

cve-2005-3871

sql injection

remote attackers

joels bulletin board

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.0%

JSON

Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php.

Affected configurations

NVD

Node

jbbjbbRange≤0.9.9_rc3

CPENameOperatorVersion
jbb:jbbjbble0.9.9_rc3

CPE	Name	Operator	Version
jbb:jbb	jbb	le	0.9.9_rc3

References

pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html

secunia.com/advisories/17727

www.osvdb.org/21148

www.osvdb.org/21149

www.osvdb.org/21150

www.osvdb.org/21151

www.securityfocus.com/bid/15590

www.vupen.com/english/advisories/2005/2620

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.9 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.0%

JSON

Related for CVE-2005-3871

cvelist1 nvd1