CVE-2005-1287

Published: Apr 23, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

Affected (1)

Products: Bk Dev: Bk Forum

Bk Dev

1 product

Bk Forum

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bk Dev Bk Forum	version ≤ 4

References (18)

http://marc.info/?l=bugtraq&m=111428133317901&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15072

Source: cve@mitre.org

http://securitytracker.com/id?1013793

Source: cve@mitre.org

Exploit

http://www.digitalparadox.org/advisories/bkdev.txt

Source: cve@mitre.org

Exploit

http://www.osvdb.org/15784

Source: cve@mitre.org

http://www.osvdb.org/15785

Source: cve@mitre.org

http://www.osvdb.org/15786

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431659/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431863/100/0/threaded

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=111428133317901&w=2