CVE-2005-3259

HIGH 7.5CVE-2005-3259 · Published 20/10/2005 · updated 16/06/2026

In short

CVE-2005-3259 is a HIGH (CVSS 7.5) vulnerability affecting versatilebulletinboard (versatilebulletinboard).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
versatilebulletinboard versatilebulletinboard	`= 1.0.0.rc2`	No fix yet

Description

Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.

References

marc.info
rgod.altervista.org/versatile100RC2.html · Exploit
secunia.com/advisories/17174 · Vendor Advisory
osvdb.org/19962
osvdb.org/19963
osvdb.org/19964
osvdb.org/19965
osvdb.org/19966
osvdb.org/19967
osvdb.org/19968
securityfocus.com/bid/15068 · Exploit

More vulnerabilities in versatilebulletinboard

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free