Unscored severity · published May 2, 2005
CVE-2005-1199
SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UB
Ultimate Bulletin Board · Infopop
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1199
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1199
marc.info
http://marc.info/?l=bugtraq&m=111393619021575&w=2
Patch
http://secunia.com/advisories/15024
www.osvdb.org
http://www.osvdb.org/15698
Exploit
http://www.securityfocus.com/bid/13253
More from Ultimate Bulletin Board
5.3
CVE-2022-25091
Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature
–
CVE-2003-0587
Cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x allows remote authenticated users to execute arbitrary web script and gain administrative…
–
CVE-2002-0223
Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted…
–
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a…
–
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about:…