Description
SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers to execute arbitrary SQL commands via the flexbb_lang_id COOKIE parameter to index.php.
References
- ADV-2007-1141 vdb-entry
- flexbb-index-sql-injection(33250) vdb-entry
- http://www.kapda.ir/advisory-481.html
- 20070327 [KAPDA::#64] - Flexbb Sql Injection mailing-list
- 2486 third-party-advisory
- 23161 vdb-entry