CVE Database
/

CVE-2005-3918

Back to search

CVE-2005-3918

Published: Nov 30, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial.

VendorProductVersions

n/a

n/a

affected
n/a

References

21307
vdb-entry
x_refsource_OSVDB
15566
vdb-entry
x_refsource_BID
21308
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now