CVE-2008-2023 Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel....
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) invisible and (2) timeoffset parameters to profile/controlpanel.asp and the (3) attachmentid parameter to forums/attach-file.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pd9 software megabbs | = 2.2 | No fix listed |
References
- 29979 third-party-advisory vendor-advisory
- www.bugreport.ir exploit
- 28961 vdb-entry
- megabbs-multiple-sql-injection(42044) vdb-entry
- 5507 exploit