CVE-2005-2058
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote...
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
- Record
CVE-2005-2058- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
- Record
CVE-2005-2058- Updated
- 2026-11-02
EUVDEUVD-2005-2060 No score
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
- Record
EUVD-2005-2060- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9q4j-627x-95w7 No score
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote...
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.
- Record
GHSA-9q4j-627x-95w7- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | UBBCentral UBB.Threads < 6.5.2 Beta - 'mailthread.php' SQL Injection | 2005-06-25 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'download.php?Number' SQL Injection | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'calendar.php' Multiple SQL Injections | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'viewmessage.php?message' SQL Injection | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'addfav.php?main' SQL Injection | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'notifymod.php?Number' SQL Injection | 2005-06-24 |
| Exploit-DB | UBBCentral UBB.Threads 5.5.1/6.x - 'grabnext.php?posted' SQL Injection | 2005-06-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2058 is a high vulnerability (CVSS 7.5) in Ubbcentral Ubb.threads, published June 28, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 68th percentile. No source names a fixed version.