CVE-2005-1287

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.2%

from disclosure to weapon363 days

Published on NVDApr 26

1st PoC+363d

exploitation probability

2.2%top 19% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1714

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=111428133317901&w=2 http://secunia.com/advisories/15072 http://securitytracker.com/id?1013793 http://www.digitalparadox.org/advisories/bkdev.txt http://www.osvdb.org/15784 http://www.osvdb.org/15785 http://www.osvdb.org/15786 http://www.securityfocus.com/archive/1/431659/100/0/threaded http://www.securityfocus.com/archive/1/431863/100/0/threaded