PT-2005-4947 · Aspbb · Aspbb

Published 2005-12-15 · Updated 2017-07-20 · CVE-2005-4259

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ASPBB version 0.4

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the TID parameter in "topic.asp", the FORUM ID parameter in "forum.asp", and the PROFILE ID parameter in "profile.asp".

Recommendations For ASPBB version 0.4, consider restricting access to the vulnerable parameters TID, FORUM ID, and PROFILE ID in the respective API endpoints "topic.asp", "forum.asp", and "profile.asp" until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-4259

Affected Products

Aspbb

References · 6

• 🔥 https://exploit-db.com/exploits/26823 · Exploit
• 🔥 https://exploit-db.com/exploits/26822 · Exploit
• 🔥 http://securityfocus.com/bid/15859 · Exploit
• 🔥 https://exploit-db.com/exploits/26821 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4259 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40004 · Note