Vulners
Lucene search
ttCMS 2.2/2.3 / ttForum 1.1 - 'index.php' Instant-Messages Preferences SQL Injection
source: https://www.securityfocus.com/bid/7634/info
A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks.
It has been reported that a problem exists in the Instant-Messages script distributed as part of the software. Due to insufficient sanitizing of input, it is possible for a remote user to inject arbitrary SQL into the database used by the web forums.
It should be noted that the current version of YaBB SE, the Forum that ttForum was derived from, is not affected by this vulnerability.
http://www.example.org/board/index.php?action=imprefs
Go to the Ignorelist-Textfield and enter:
',memberGroup='AdministratorData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 May 2003 00:00Current
7.4High risk
Vulners AI Score7.4