Description (CNA)
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15655
- http://securitytracker.com/id?1009561
- http://marc.info/?l=bugtraq&m=108032355905265&w=2
- http://www.securityfocus.com/bid/9983
- http://www.osvdb.org/16886
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History
ADP enrichment
No English description supplied.