CVE-2005-3019

CVE-2005-3019 describes multiple SQL injection vulnerabilities in vBulletin versions prior to 3.0.9. These flaws allow remote attackers to execute arbitrary SQL commands through various parameters in scripts like joinrequests.php, user.php, usertitle.php, and usertools.php. The vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 89/100, highlighting its significant potential impact. While not listed on the KEV catalog, exploit code for these vulnerabilities is publicly available on ExploitDB, including specific examples targeting admincp scripts. Despite this, there is no evidence of active exploitation, and community discussion or media coverage is minimal.