Unscored CVE-2002-1879 EUVD-2002-1858GHSA-26hr-9q73-x3wm

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to memb…

Published Jun 28, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.

References

http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt
lokwa-bb-sql-injection(9318) vdb-entry
20020608 Security holes in LokwaBB and W-Agora mailing-list
4981 vdb-entry