CVE-2005-3870

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) table and (2) messageID parameters.

Affected (1)

Products: Edmobbs: Edmobbs

Edmobbs

1 product

Edmobbs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Edmobbs Edmobbs	version ≤ 0.9

References (10)

http://pridels0.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17726

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21132

Source: cve@mitre.org

http://www.securityfocus.com/bid/15589

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/2621

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html