Description
SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php.
References
- 19135 third-party-advisory
- http://www.gold-sonata.com/forums/read.php?board=1&id=17271
- 582 third-party-advisory
- 23692 vdb-entry
- 20060314 [eVuln] CyBoards PHP Lite SQL Injection Vulnerability mailing-list
- 17107 vdb-entry
- ADV-2006-0820 vdb-entry
- 16987 vdb-entry
- cyboards-processpost-sql-injection(25061) vdb-entry
- http://evuln.com/vulns/91/description.html