CVE-2005-1287 Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various...
HighCVSS 7.5
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bk dev bk forum | <= 4 | No fix listed |
References
- 20050423 Multiple Sql injection vulnerabilities in BK Forum v.4 mailing-list
- 15072 third-party-advisory
- 1013793 exploit vdb-entry
- www.digitalparadox.org exploit
- 15784 vdb-entry
- 15785 vdb-entry
- 15786 vdb-entry
- 20060421 BK Forum <<--V.4.0 SQL Injection mailing-list
- 20060423 BK Forum <= 4.0 Remote SQL Injection mailing-list