{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-04-23T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "15784", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/15784"}, {"name": "20060423 BK Forum <= 4.0 Remote SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"}, {"name": "15786", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/15786"}, {"name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=111428133317901&w=2"}, {"name": "15072", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/15072"}, {"name": "1013793", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1013793"}, {"tags": ["x_refsource_MISC"], "url": "http://www.digitalparadox.org/advisories/bkdev.txt"}, {"name": "15785", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/15785"}, {"name": "20060421 BK Forum <<--V.4.0 SQL Injection", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-1287", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "15784", "refsource": "OSVDB", "url": "http://www.osvdb.org/15784"}, {"name": "20060423 BK Forum <= 4.0 Remote SQL Injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"}, {"name": "15786", "refsource": "OSVDB", "url": "http://www.osvdb.org/15786"}, {"name": "20050423 Multiple Sql injection vulnerabilities in BK Forum v.4", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=111428133317901&w=2"}, {"name": "15072", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/15072"}, {"name": "1013793", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1013793"}, {"name": "http://www.digitalparadox.org/advisories/bkdev.txt", "refsource": "MISC", "url": "http://www.digitalparadox.org/advisories/bkdev.txt"}, {"name": "15785", "refsource": "OSVDB", "url": "http://www.osvdb.org/15785"}, {"name": "20060421 BK Forum <<--V.4.0 SQL Injection", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-1287", "datePublished": "2005-04-26T04:00:00", "dateReserved": "2005-04-26T00:00:00", "dateUpdated": "2018-10-19T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bk_dev:bk_forum:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1EA4A04-A643-4AFD-B41B-D72AAE1B343B", "versionEndIncluding": "4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp."}], "id": "CVE-2005-1287", "lastModified": "2018-10-19T15:31:47.097", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-04-23T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=111428133317901&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/15072"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1013793"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.digitalparadox.org/advisories/bkdev.txt"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/15784"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/15785"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/15786"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/431659/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/431863/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}