Exploit OpenBB 1.0/1.1 - 'board.php' SQL Injection

[Exploiter]

EDB-ID

22519

Проверка EDB

1. Пройдено

Автор

ALBERT PUIGSECH GALICIA

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2003-04-22

source: https://www.securityfocus.com/bid/7404/info

It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The consequences will vary depending on the underlying database implementation. 

http://www.example.com/board.php?FID=2%20<something>

where <something> represents a SQL query.