Search

Find a vulnerability

Search criteria

    2 vulnerabilities by bk_dev

    CVE-2005-1287 (GCVE-0-2005-1287)

    Vulnerability from cvelistv5 – Published: 2005-04-26 04:00 – Updated: 2024-08-07 21:44
    VLAI
    Summary
    Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://www.osvdb.org/15784 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/archive/1/431863/100… mailing-listx_refsource_BUGTRAQ
    http://www.osvdb.org/15786 vdb-entryx_refsource_OSVDB
    http://marc.info/?l=bugtraq&m=111428133317901&w=2 mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/15072 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1013793 vdb-entryx_refsource_SECTRACK
    http://www.digitalparadox.org/advisories/bkdev.txt x_refsource_MISC
    http://www.osvdb.org/15785 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/archive/1/431659/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2005-04-23 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:44:06.126Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15784",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15784"
          },
          {
            "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
          },
          {
            "name": "15786",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15786"
          },
          {
            "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
          },
          {
            "name": "15072",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/15072"
          },
          {
            "name": "1013793",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1013793"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
          },
          {
            "name": "15785",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15785"
          },
          {
            "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-04-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15784",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15784"
        },
        {
          "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
        },
        {
          "name": "15786",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15786"
        },
        {
          "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
        },
        {
          "name": "15072",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/15072"
        },
        {
          "name": "1013793",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1013793"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
        },
        {
          "name": "15785",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15785"
        },
        {
          "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-1287",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15784",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15784"
            },
            {
              "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
            },
            {
              "name": "15786",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15786"
            },
            {
              "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
            },
            {
              "name": "15072",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/15072"
            },
            {
              "name": "1013793",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1013793"
            },
            {
              "name": "http://www.digitalparadox.org/advisories/bkdev.txt",
              "refsource": "MISC",
              "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
            },
            {
              "name": "15785",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15785"
            },
            {
              "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-1287",
    "datePublished": "2005-04-26T04:00:00.000Z",
    "dateReserved": "2005-04-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T21:44:06.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2005-1287 (GCVE-0-2005-1287)

    Vulnerability from nvd – Published: 2005-04-26 04:00 – Updated: 2024-08-07 21:44
    VLAI
    Summary
    Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2319 records in the last 180 days details
    References
    URL Tags
    http://www.osvdb.org/15784 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/archive/1/431863/100… mailing-listx_refsource_BUGTRAQ
    http://www.osvdb.org/15786 vdb-entryx_refsource_OSVDB
    http://marc.info/?l=bugtraq&m=111428133317901&w=2 mailing-listx_refsource_BUGTRAQ
    http://secunia.com/advisories/15072 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1013793 vdb-entryx_refsource_SECTRACK
    http://www.digitalparadox.org/advisories/bkdev.txt x_refsource_MISC
    http://www.osvdb.org/15785 vdb-entryx_refsource_OSVDB
    http://www.securityfocus.com/archive/1/431659/100… mailing-listx_refsource_BUGTRAQ
    Date Public
    2005-04-23 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:44:06.126Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15784",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15784"
          },
          {
            "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
          },
          {
            "name": "15786",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15786"
          },
          {
            "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
          },
          {
            "name": "15072",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/15072"
          },
          {
            "name": "1013793",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1013793"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
          },
          {
            "name": "15785",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/15785"
          },
          {
            "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-04-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15784",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15784"
        },
        {
          "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
        },
        {
          "name": "15786",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15786"
        },
        {
          "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
        },
        {
          "name": "15072",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/15072"
        },
        {
          "name": "1013793",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1013793"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
        },
        {
          "name": "15785",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/15785"
        },
        {
          "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-1287",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15784",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15784"
            },
            {
              "name": "20060423 BK Forum \u003c= 4.0 Remote SQL Injection",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"
            },
            {
              "name": "15786",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15786"
            },
            {
              "name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=111428133317901\u0026w=2"
            },
            {
              "name": "15072",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/15072"
            },
            {
              "name": "1013793",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1013793"
            },
            {
              "name": "http://www.digitalparadox.org/advisories/bkdev.txt",
              "refsource": "MISC",
              "url": "http://www.digitalparadox.org/advisories/bkdev.txt"
            },
            {
              "name": "15785",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/15785"
            },
            {
              "name": "20060421 BK Forum \u003c\u003c--V.4.0 SQL Injection",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-1287",
    "datePublished": "2005-04-26T04:00:00.000Z",
    "dateReserved": "2005-04-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T21:44:06.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}