CVE-2005-3871

Published: Nov 29, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php.

Affected (1)

Products: Jbb: Jbb

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jbb Jbb	version ≤ 0.9.9_rc3

References (16)

http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/17727

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/21148

Source: cve@mitre.org

http://www.osvdb.org/21149

Source: cve@mitre.org

http://www.osvdb.org/21150

Source: cve@mitre.org

http://www.osvdb.org/21151

Source: cve@mitre.org

http://www.securityfocus.com/bid/15590

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2620

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17727

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/21148

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21149

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21150

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21151

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15590

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2620

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.