CVE-2005-3918

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.17%

Published

Nov 30, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBOvBB 0.x - 'profile.php?userid' SQL Injection Exploit-DBOvBB 0.x - 'thread.php?threadid' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial.

Affected Products (8)

ovbb · ovbbvulnerable

References (8)

http://pridels0.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html

http://www.osvdb.org/21307

http://www.osvdb.org/21308

http://www.securityfocus.com/bid/15566

Exploit

http://pridels0.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html

http://www.osvdb.org/21307

http://www.osvdb.org/21308

http://www.securityfocus.com/bid/15566

Exploit

KEV Catalog EPSS Scores Vendors All CVEs