CVE-2008-3718 Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profil...
MediumCVSS 6.5
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and the (2) user parameter to profile.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cyberbb | = 0.6 | No fix listed |
References
- 4168 third-party-advisory
- 30734 vdb-entry
- cyberbb-id-user-sql-injection(44526) vdb-entry
- 6260 exploit