CVE-2005-3364

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-30 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via (1) the buddy parameter in buddy.php, (2) the u2uid parameter in u2u.php, and (3) an invalid theme file in the themes action to ctrtools.php.

Affected products

Platinum Dboardgear: all versions

References

http://marc.info/?l=bugtraq&m=113017087231116&w=2
http://securityreason.com/securityalert/109
http://securitytracker.com/id?1015095
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-10/0298.html
http://www.osvdb.org/20442
http://www.osvdb.org/20443
http://www.securityfocus.com/bid/15174
http://www.securityfocus.com/bid/15194
http://marc.info/?l=bugtraq&m=113017087231116&w=2
http://securityreason.com/securityalert/109
http://securitytracker.com/id?1015095
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-10/0298.html

Get alerted when CVE-2005-3364 or the next vulnerability affects your stack