CVE-2005-3871

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-29 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php.

Affected products

Jbb: through 0.9.9_rc3

References

http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html
http://secunia.com/advisories/17727
http://www.osvdb.org/21148
http://www.osvdb.org/21149
http://www.osvdb.org/21150
http://www.osvdb.org/21151
http://www.securityfocus.com/bid/15590
http://www.vupen.com/english/advisories/2005/2620
http://pridels0.blogspot.com/2005/11/jbb-sql-inj-vuln.html
http://secunia.com/advisories/17727
http://www.osvdb.org/21148
http://www.osvdb.org/21149

Get alerted when CVE-2005-3871 or the next vulnerability affects your stack