CVE-2005-0252

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in BibORB 1.3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110868948719773&w=2Exploit, Mailing List, Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/12583Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
http://marc.info/?l=bugtraq&m=110868948719773&w=2Exploit, Mailing List, Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/12583Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-02534.0Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary CVE-2005-02543.7BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remot CVE-2005-02555.0String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do CVE-2005-02565.0The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by r CVE-2005-02585.0Directory traversal vulnerability in (1) usercp_register.php and (2) usercp_avatar.php for phpBB 2.0.11, and possibly other versions, with g CVE-2005-02596.4phpBB 2.0.11, and possibly other versions, with remote avatars and avatar uploading enabled, allows local users to read arbitrary files by p CVE-2005-026010.0Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbi CVE-2005-02612.1lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to CVE-2005-02627.2Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument.CVE-2005-02637.2Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument.CVE-2005-02644.3Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script o CVE-2005-02657.5Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1)