CVE-2005-3918

Published: Nov 30, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial.

Affected (8)

Products: Ovbb: Ovbb

Ovbb

1 product

Ovbb

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ovbb Ovbb	Version 0.1a
Ovbb Ovbb	Version 0.2a
Ovbb Ovbb	Version 0.3a
Ovbb Ovbb	Version 0.4a
Ovbb Ovbb	Version 0.5a
Ovbb Ovbb	Version 0.6a
Ovbb Ovbb	Version 0.7a
Ovbb Ovbb	Version 0.8a