high7.5
CVE-2008-4431
SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, proba…
Impact
SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the clean_string function in includes/functions.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icebb | Icebb | through 1.0 Versions 0.9, 0.9.1, 0.9.2, 0.9.2.1, 0.9.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forums.xaos-ia.com/?topic=765
- http://secunia.com/advisories/31439
- http://www.securityfocus.com/bid/30656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44403
- http://forums.xaos-ia.com/?topic=765
- http://secunia.com/advisories/31439
- http://www.securityfocus.com/bid/30656
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44403