CVE-2007-6083 SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icebb | = 1.0-rc6 | No fix listed |
References
- 38732 vdb-entry
- 27709 third-party-advisory
- www.aeroxteam.fr
- www.aeroxteam.fr
- 20071118 IceBB 1.0rc6 <= Remote SQL Injection mailing-list
- 20071119 Re: IceBB 1.0rc6 <= Remote SQL Injection mailing-list
- 26483 vdb-entry
- icebb-xforwardedfor-sql-injection(38550) vdb-entry
- 4634 exploit