Description
SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie.
References
- 20060308 [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities mailing-list
- ADV-2006-0758 vdb-entry
- http://evuln.com/vulns/88/summary.html
- http://www.ekinboard.com/forums/v1/viewtopic.php?id=469
- 16861 vdb-entry
- ekinboard-config-sql-injection(24922) vdb-entry
- 19045 third-party-advisory
- http://www.ekinboard.com/patch_for_1.0.3.txt
- 23547 vdb-entry