CVE-2005-1287

BK Forum 4.0 - SQL Injection

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.

Exploits (1)

exploitdb WORKING POC VERIFIED
by n0m3rcy · textwebappsasp
https://www.exploit-db.com/exploits/1714

References (9)

Core 9
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111428133317901&w=2
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1013793
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/15784
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431863/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/15786
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15072
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/15785
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/431659/100/0/threaded

Scores

EPSS 0.0237
EPSS Percentile 85.1%

Details

Status published
Products (1)
bk_dev/bk_forum < 4
Published Apr 23, 2005
Tracked Since Feb 18, 2026