ID EDB-ID:24633 Type exploitdb Reporter pigrelax Modified 2004-09-27T00:00:00
Description
source: https://www.securityfocus.com/bid/11253/info
MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks.
MegaBBS versions 2.0 and 2.1 are reported prone to these issues.
view-profile.asp?type=single&memberid=1'
view-profile.asp?type=team&teamid=1'
{"id": "EDB-ID:24633", "vendorId": null, "type": "exploitdb", "bulletinFamily": "exploit", "title": "PD9 Software MegaBBS 2.0/2.1 - 'view-profile.asp' Multiple SQL Injections", "description": "", "published": "2004-09-27T00:00:00", "modified": "2004-09-27T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.exploit-db.com/exploits/24633", "reporter": "pigrelax", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2022-01-13T06:25:17", "viewCount": 8, "enchantments": {"score": {"value": 0.1, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.1}, "sourceHref": "https://www.exploit-db.com/download/24633", "sourceData": "source: https://www.securityfocus.com/bid/11253/info\r\n \r\nMegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks.\r\n \r\nMegaBBS versions 2.0 and 2.1 are reported prone to these issues.\r\n\r\nview-profile.asp?type=single&memberid=1'\r\nview-profile.asp?type=team&teamid=1'", "osvdbidlist": ["52983"], "exploitType": "webapps", "verified": true, "_state": {"dependencies": 1647552747}}