Sql injection

2006-03-0620:06:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.4%

JSON

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

CPENameOperatorVersion
pentacle_in-out_boardeq6.03

CPE	Name	Operator	Version
	pentacle_in-out_board	eq	6.03

References

lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html

lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html

secunia.com/advisories/19024

securitytracker.com/id?1015682

www.nukedx.com/?viewdoc=13

www.nukedx.com/?viewdoc=14

www.securityfocus.com/archive/1/426074/100/0/threaded

www.securityfocus.com/archive/1/426075/100/0/threaded

www.securityfocus.com/bid/16818

www.vupen.com/english/advisories/2006/0749