high7.5Public exploit code
CVE-2008-2492
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Campus Bulletin Board 3.4 - '/post3/book.asp?review' SQL Injection2008-05-26 · webapps · asp · Verified
- Campus Bulletin Board 3.4 - '/post3/view.asp?id' SQL Injection2008-05-26 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to post3/view.asp and the (2) review parameter to post3/book.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Badongo | Campus Bulletin Board | Version 3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/492586/100/0/threaded
- http://www.securityfocus.com/bid/29375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42660
- http://www.securityfocus.com/archive/1/492586/100/0/threaded
- http://www.securityfocus.com/bid/29375
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42660