CVE-2008-6970 SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.
HighCVSS 7.5
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | <= 7.3.1 | No fix listed |
| ubbcentral ubb.threads | = 3.4 | No fix listed |
| ubbcentral ubb.threads | = 3.5 | No fix listed |
| ubbcentral ubb.threads | = 5.0 | No fix listed |
| ubbcentral ubb.threads | = 5.5.1 | No fix listed |
| ubbcentral ubb.threads | = 6.0 | No fix listed |
| ubbcentral ubb.threads | = 6.0.1 | No fix listed |
| ubbcentral ubb.threads | = 6.0.2 | No fix listed |
| ubbcentral ubb.threads | = 6.0.3 | No fix listed |
| ubbcentral ubb.threads | = 6.1 | No fix listed |
| ubbcentral ubb.threads | = 6.1.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.1 | No fix listed |
| ubbcentral ubb.threads | = 6.2.2 | No fix listed |
| ubbcentral ubb.threads | = 6.2.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3 | No fix listed |
| ubbcentral ubb.threads | = 6.3.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4 | No fix listed |
| ubbcentral ubb.threads | = 6.4.1 | No fix listed |
| ubbcentral ubb.threads | = 6.4.2 | No fix listed |
| ubbcentral ubb.threads | = 6.4.3 | No fix listed |
| ubbcentral ubb.threads | = 6.4.4 | No fix listed |
| ubbcentral ubb.threads | = 6.5 | No fix listed |
| ubbcentral ubb.threads | = 6.5.1 | No fix listed |
| ubbcentral ubb.threads | = 6.5.1.1 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ubbcentral ubb.threads | = 6.5.2 | No fix listed |
| ubbcentral ubb.threads | = 6.5.2_beta2 | No fix listed |
| ubbcentral ubb.threads | = 6.5.3 | No fix listed |
| ubbcentral ubb.threads | = 7.0 | No fix listed |
| ubbcentral ubb.threads | = 7.1 | No fix listed |
| ubbcentral ubb.threads | = 7.2 | No fix listed |
References
- 47954 vdb-entry
- 31804 third-party-advisory vendor-advisory
- www.gulftech.org exploit
- 31074 exploit vdb-entry
- www.ubbcentral.com vendor-advisory
- ubbthreads-forumarray-sql-injection(44976) vdb-entry