VULNERABILITY INTELLIGENCE

CVE-2005-4431

CVSS score7.5 HIGH

EPSS probability1.15%

CISA KEVNot currently listed

Published2005-12-21

Last modified2026-06-16

Description

SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter to search.php. NOTE: the view_user.php/sort_by vector is already covered by CVE-2005-1554 and CVE-2004-2181.