SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/13071 | Exploit Patch |
http://secunia.com/advisories/14882 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=111306207306155&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-01 21:00
Updated : 2016-10-17 20:16
NVD link : CVE-2005-1051
Mitre link : CVE-2005-1051
JSON object : View
CWE
Products Affected
punbb
- punbb