CVE Vulnerabilities

CVE-2005-1051

Published: May 02, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a change_email action.

Affected Software

NameVendorStart VersionEnd Version
PunbbPunbb1.0 (including)1.0 (including)
PunbbPunbb1.0.1 (including)1.0.1 (including)
PunbbPunbb1.0_alpha (including)1.0_alpha (including)
PunbbPunbb1.0_beta1 (including)1.0_beta1 (including)
PunbbPunbb1.0_beta2 (including)1.0_beta2 (including)
PunbbPunbb1.0_beta3 (including)1.0_beta3 (including)
PunbbPunbb1.0_rc1 (including)1.0_rc1 (including)
PunbbPunbb1.0_rc2 (including)1.0_rc2 (including)
PunbbPunbb1.1 (including)1.1 (including)
PunbbPunbb1.1.1 (including)1.1.1 (including)
PunbbPunbb1.1.2 (including)1.1.2 (including)
PunbbPunbb1.1.3 (including)1.1.3 (including)
PunbbPunbb1.1.4 (including)1.1.4 (including)
PunbbPunbb1.1.5 (including)1.1.5 (including)
PunbbPunbb1.2.1 (including)1.2.1 (including)
PunbbPunbb1.2.2 (including)1.2.2 (including)
PunbbPunbb1.2.3 (including)1.2.3 (including)
PunbbPunbb1.2.4 (including)1.2.4 (including)

References