CVE-2005-2989
DeluxeBB 1.0 and 1.0.5 - SQL Injection via tid uid or fid Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2005-2989. PoCs published by abducter.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in DeluxeBB due to improper sanitization of user input in the 'tid' parameter. It references a security advisory but does not include actual exploit code or a proof-of-concept.
Description
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter to topic.php, the uid parameter to (2) misc.php or (3) pm.php, or the fid parameter to (3) forums.php or (4) newpost.php.
Exploits (5)
The provided text describes a SQL injection vulnerability in DeluxeBB due to improper sanitization of user input in the 'tid' parameter. It references a security advisory but does not include actual exploit code or a proof-of-concept.
The provided text describes a SQL injection vulnerability in DeluxeBB, where the 'uid' parameter in the 'pm.php' script is not properly sanitized. This allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.
The provided text describes a SQL injection vulnerability in DeluxeBB, where the 'fid' parameter in 'newpost.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially leading to data disclosure or modification.
The provided text describes a SQL injection vulnerability in DeluxeBB due to improper input sanitization. It references a specific URL parameter (`uid`) that can be exploited to manipulate SQL queries.
The provided text describes SQL injection vulnerabilities in DeluxeBB due to insufficient input sanitization. It references a generic example URL but lacks actual exploit code or technical details for execution.