Unscored severity · published Jun 13, 2005
CVE-2005-1972
Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not properly handled by the insertUser function, or (2) the bb_session_id value in a cookie.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FU
Fusionbb · Interactivephp
11_beta · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1972
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1972
Patch
http://www.gulftech.org/?node=research&article_id=00081-06132005
Patch
http://www.interactivephp.com/misc/CHANGELOG.html
More from Fusionbb
–
CVE-2005-1971
Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language…