CVE-2008-2996 Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchque...
MediumCVSS 6.8
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gravityboardx gravity board x | = 2.0-beta | No fix listed |
References
- 3970 third-party-advisory
- 29685 exploit vdb-entry
- gbx-index-sql-injection(43022) vdb-entry
- 5791 exploit