CVE-2005-2193

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-07-11 · updated 2026-06-16

Description

SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.

Affected products

Punbb: 1.0, 1.0.1, 1.0_alpha, 1.0_beta1, 1.0_beta2, 1.0_beta3 (+12)

References

http://marc.info/?l=bugtraq&m=112084384928950&w=2
http://www.hardened-php.net/advisory-082005.php
http://www.punbb.org/
http://marc.info/?l=bugtraq&m=112084384928950&w=2
http://www.hardened-php.net/advisory-082005.php
http://www.punbb.org/

Get alerted when CVE-2005-2193 or the next vulnerability affects your stack