Unscored CVE-2007-0266 EUVD-2007-0268GHSA-fp5r-jv8f-676m

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbit…

Published Jan 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter.

References

23759 third-party-advisory
ADV-2007-0208 vdb-entry
32825 vdb-entry
http://www.bugsec.com/articles.php?Security=20
20070111 Ezboxx multiple vulnerabilities. mailing-list
33466 vdb-entry