CVE-2005-3871: Jbb

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Joels Bulletin board (JBB) 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nr parameter in topiczeigen.php, (2) forum and (3) zeigeseite parameters in showforum.php, (4) forum parameter in newtopic.php, and (5) tidnr parameter in neuerbeitrag.php.

Affected products

• Jbb Jbb: up to and including 0.9.9_rc3

Published 2005-11-29. Last modified 2026-06-16.