Description
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.
References
- xmb-forum-sql-injection(15655) vdb-entry
- 1009561 vdb-entry
- 20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta] mailing-list
- 9983 vdb-entry
- 16886 vdb-entry
- https://docs.xmbforum2.com/index.php?title=Security_Issue_History