Description
Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.
References
- 24348 vdb-entry
- 24351 vdb-entry
- 24345 vdb-entry
- 24346 vdb-entry
- 19486 third-party-advisory
- 24343 vdb-entry
- 20060415 [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities mailing-list
- 24342 vdb-entry
- 24349 vdb-entry
- awebbb-multiple-sql-injection(25587) vdb-entry
- 24352 vdb-entry
- http://evuln.com/vulns/117/summary.html
- ADV-2006-1197 vdb-entry
- 24347 vdb-entry
- 24350 vdb-entry
- 24341 vdb-entry
- 17352 vdb-entry
- 24340 vdb-entry
- 24344 vdb-entry