Exploit XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections

[Exploiter]

EDB-ID

23748

Проверка EDB

1. Пройдено

Автор

JANEK VIND

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2004-0323

Дата публикации

2004-02-23

source: https://www.securityfocus.com/bid/9726/info
  
XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user or to have malicious SQL queries executed in the underlying database.

http://www.example.com/xmb18sp2/forumdisplay.php?fid=1&tpp=x
http://www.example.com/xmb18sp2/forumdisplay.php?fid=1&ascdesc=x