CVE-2005-3259

Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "search this thread" feature, (3) "search for posts" feature, (4) "forgot password" feature, (5) list parameter in userlistpre.php, and the (6) select, (7) categ, and (8) to parameters in index.php.

• http://marc.info/?l=bugtraq&m=112907535528616&w=2
• http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17174/Vendor Advisory
• http://www.osvdb.org/19962
• http://www.osvdb.org/19963
• http://www.osvdb.org/19964
• http://www.osvdb.org/19965
• http://www.osvdb.org/19966
• http://www.osvdb.org/19967
• http://www.osvdb.org/19968
• http://www.securityfocus.com/bid/15068Exploit
• http://marc.info/?l=bugtraq&m=112907535528616&w=2
• http://rgod.altervista.org/versatile100RC2.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/17174/Vendor Advisory
• http://www.osvdb.org/19962
• http://www.osvdb.org/19963
• http://www.osvdb.org/19964
• http://www.osvdb.org/19965
• http://www.osvdb.org/19966
• http://www.osvdb.org/19967
• http://www.osvdb.org/19968
• http://www.securityfocus.com/bid/15068Exploit

Published

Oct 20, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3253Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 …
• CVE-2005-3254The CGIwrap program before 3.9 on Debian GNU/Linux uses an i…
• CVE-2005-3255The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in D…
• CVE-2005-3256The key selection dialogue in Enigmail before 0.92.1 can inc…
• CVE-2005-3257The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, a…
• CVE-2005-3258The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE…
• CVE-2005-3260Multiple cross-site scripting (XSS) vulnerabilities in versa…
• CVE-2005-3261getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 li…
• CVE-2005-3262Format string vulnerability in RARLAB WinRAR 2.90 through 3.…
• CVE-2005-3263Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR…
• CVE-2005-3264Cross-site scripting (XSS) vulnerability in thread.php for Z…
• CVE-2005-3265Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.8…