UBBCentral UBB.threads 5.5.1/6.x download.php Number Parameter SQL Injection

2005-06-24T00:00:00
ID EDB-ID:25897
Type exploitdb
Reporter James Bercegay
Modified 2005-06-24T00:00:00

Description

UBBCentral UBB.threads 5.5.1/6.x download.php Number Parameter SQL Injection. CVE-2005-2058. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/14052/info

UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. 

http://www.example.com/ubbt/download.php?Number=42227[SQL]