CVE-2007-1254 SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin paramet...
MediumCVSS 6.5
EPSS 0.99%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| connectix boards | = 0.4 | No fix listed |
| connectix boards | = 0.4.1 | No fix listed |
| connectix boards | = 0.4.2 | No fix listed |
| connectix boards | = 0.4.3 | No fix listed |
| connectix boards | = 0.4.4 | No fix listed |
| connectix boards | = 0.5 | No fix listed |
| connectix boards | = 0.5.1 | No fix listed |
| connectix boards | = 0.5.2 | No fix listed |
| connectix boards | = 0.5.3 | No fix listed |
| connectix boards | = 0.5.4 | No fix listed |
| connectix boards | = 0.5.5 | No fix listed |
| connectix boards | = 0.6 | No fix listed |
| connectix boards | = 0.6.1 | No fix listed |
| connectix boards | = 0.7 | No fix listed |
References
- 33537 vdb-entry
- 24255 third-party-advisory vendor-advisory
- 2364 third-party-advisory
- 20070221 Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit mailing-list
- 3352 exploit