CVE-2005-0651

Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to…

published March 4, 2005

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as "drivers.php" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01465 · 73.3th percentile
Published
2005-03-04T05:00Z
EPSS history
Timeline
  • 04 MAR 05:00Z
    Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to…
    cvelistv5