CVE-2005-1287
HIGH 7.5EPSS 2.2%
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
- CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 2.16% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2005-04-26
- Updated
- 2024-08-07