CVE-2005-3419: SQL Injection
Published Nov 1, 2005
·Updated
SQL injection vulnerability in usercpregister.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signaturebbcodeuid parameter, which is not properly initialized.
Affected Software
27 affected components
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=2.0.12
Phpbb Group Phpbb=2.0.13
Phpbb Group Phpbb=2.0.14
Phpbb Group Phpbb=2.0.15
Phpbb Group Phpbb=2.0.16
Phpbb Group Phpbb=2.0.17
Phpbb Group Phpbb=2.0_beta1
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_rc4
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
09:02 PM
Nov 2, 2005
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3419?
CVE-2005-3419 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2005-3419?
To fix CVE-2005-3419, upgrade phpBB to version 2.0.18 or later, where the SQL injection vulnerability has been addressed.
3
Which versions of phpBB are affected by CVE-2005-3419?
CVE-2005-3419 affects phpBB versions from 2.0.0 up to 2.0.17.
4
Can CVE-2005-3419 lead to data compromise?
Yes, CVE-2005-3419 can allow attackers to execute arbitrary SQL commands, potentially compromising sensitive data.
5
What component of phpBB is vulnerable in CVE-2005-3419?
In CVE-2005-3419, the vulnerable component is usercp_register.php.