high7.5Public exploit code
CVE-2011-4066
SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection2011-10-17 · webapps · php
Impact
SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sir | Gnuboard | through 4.33.02 Versions 3.30, 3.31, 3.32, 3.33, 3.34 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/17992
- http://www.securityfocus.com/bid/50173
- http://www.securitytracker.com/id?1026197
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70686
- http://www.exploit-db.com/exploits/17992
- http://www.securityfocus.com/bid/50173
- http://www.securitytracker.com/id?1026197
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70686