CVE-2007-0642 SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass to user_confir...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in tForum 2.00 in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) pass to user_confirm.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rbl tforum | = 2.00 | No fix listed |
References
- forums.avenir-geopolitique.net exploit
- 2201 third-party-advisory
- 20070131 Partial source code verify - "RBL - ASP" scripts SQL injection exploit mailing-list
- 36040 vdb-entry
- 20070127 RBL - ASP (scripts with db) SQL injection mailing-list
- 20070129 RBL - ASP (scripts with db) SQL injection mailing-list
- 22350 vdb-entry
- rbl-userpass-sql-injection(31927) vdb-entry