CVE-2007-1902 Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b)....
MediumCVSS 6.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sonicbb | = 1.0 | No fix listed |
References
- 20070514 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities mailing-list
- 25279 third-party-advisory
- www.netvigilance.com exploit vendor-advisory
- 33907 vdb-entry
- 20070514 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities mailing-list
- 23964 vdb-entry
- ADV-2007-1816 vdb-entry
- sonicbb-search-sql-injection(34258) vdb-entry