Description
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php.
References
- 16936 vdb-entry
- 23302 vdb-entry
- 23303 vdb-entry
- http://evuln.com/vulns/84/summary.html
- skateboard-authentication-bypass(24779) vdb-entry
- 20060303 [eVuln] Skate Board Multimple Vulnerabilities mailing-list
- skateboard-sendpass-sql-injection(24778) vdb-entry
- 540 third-party-advisory
- 18978 third-party-advisory
- 23301 vdb-entry