high7.5Public exploit code
CVE-2004-1966
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) F…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenBB 1.0.x - 'post.php' Multiple SQL Injections2004-04-26 · webapps · php · Verified
- OpenBB 1.0.x - 'search.php?q' SQL Injection2004-04-26 · webapps · php · Verified
- OpenBB 1.0.x - 'member.php' Multiple SQL Injections2004-04-26 · webapps · php · Verified
- OpenBB 1.0.x - 'board.php?FID' SQL Injection2004-04-26 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbb | Openbb | Versions 1.0.0_beta1, 1.0.0_rc1, 1.0.0_rc2, 1.0.0_rc3, 1.0.5, 1.0.6 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108301983206107&w=2
- http://secunia.com/advisories/11481
- http://securitytracker.com/id?1009935
- http://www.securityfocus.com/bid/10214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15964
- http://marc.info/?l=bugtraq&m=108301983206107&w=2
- http://secunia.com/advisories/11481
- http://securitytracker.com/id?1009935
- http://www.securityfocus.com/bid/10214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15964