CVE-2005-2058
CVE-2005-2058
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
Affected products
n/a · n/apublic PoCs found — 8
exploitdbwww.exploit-db.com/exploits/25901unverifiedexploitdbwww.exploit-db.com/exploits/25898unverifiedexploitdbwww.exploit-db.com/exploits/25897unverifiedexploitdbwww.exploit-db.com/exploits/25903unverifiedexploitdbwww.exploit-db.com/exploits/25899unverifiedexploitdbwww.exploit-db.com/exploits/25902unverifiedexploitdbwww.exploit-db.com/exploits/25900unverifiedexploitdbwww.exploit-db.com/exploits/1069unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →