CVE-2005-1234: SQL Injection
Published Apr 24, 2005
·Updated
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auctionrating.php or (2) ar parameter to actionoffer.php.
Affected Software
2 affected components
Phpbb Group Phpbb-auction=1.2m
Phpbb Group Phpbb-auction=1.0m
Remediation
Patch Available
Event History
Apr 24, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1234?
CVE-2005-1234 is classified as a high severity vulnerability due to the potential for remote SQL command execution.
2
How do I fix CVE-2005-1234?
To fix CVE-2005-1234, you should upgrade phpbb-Auction to the latest version that addresses the SQL injection vulnerabilities.
3
What software versions are affected by CVE-2005-1234?
CVE-2005-1234 affects phpbb-Auction versions 1.0m and 1.2m.
4
Can CVE-2005-1234 be exploited remotely?
Yes, CVE-2005-1234 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.
5
What are the key files involved in CVE-2005-1234?
The key files involved in CVE-2005-1234 are auction_rating.php and action_offer.php.