Sql injection

2006-02-2302:06:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

JSON

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost.

CPENameOperatorVersion
ilchclaneq1.0.2
ilchclaneq1.0.1
ilchclaneq1.0.0
ilchclaneq1.0.4
ilchclaneq1.0.3
ilchclaneq0.0.1

Name	Operator	Version
ilchclan	eq	1.0.2
ilchclan	eq	1.0.1
ilchclan	eq	1.0.0
ilchclan	eq	1.0.4
ilchclan	eq	1.0.3
ilchclan	eq	0.0.1

References

secunia.com/advisories/18951

www.osvdb.org/23369

www.securityfocus.com/bid/16735

www.vupen.com/english/advisories/2006/0672

exchange.xforce.ibmcloud.com/vulnerabilities/24829

www.exploit-db.com/exploits/1516