CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2005-2697

SQL injection vulnerability in search.php for MyBulletinBoard (MyBB) 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.2%

CVSS Severity

CVSS v2 Score 7.5

References

http://marc.info/?l=bugtraq&m=112448791006470&w=2
http://secunia.com/advisories/13722/
http://www.securityfocus.com/bid/14615
http://marc.info/?l=bugtraq&m=112448791006470&w=2
http://secunia.com/advisories/13722/
http://www.securityfocus.com/bid/14615

Products affected by CVE-2005-2697

Mybulletinboard » Mybulletinboard » Version: 1.00_rc1

cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc1
Mybulletinboard » Mybulletinboard » Version: 1.00_rc2

cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc2
Mybulletinboard » Mybulletinboard » Version: 1.00_rc3

cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc3
Mybulletinboard » Mybulletinboard » Version: 1.00_rc4

cpe:2.3:a:mybulletinboard:mybulletinboard:1.00_rc4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2697

Products

Pricing

Contact Us