Sql injection

2008-06-1920:41:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.8%

JSON

SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter.

CPENameOperatorVersion
revokebbeq1.0 rc11
revokebbeq1.0 rc4

CPE	Name	Operator	Version
	revokebb	eq	1.0 rc11
	revokebb	eq	1.0 rc4

References

www.securityfocus.com/bid/29393

www.vupen.com/english/advisories/2008/1676/references

exchange.xforce.ibmcloud.com/vulnerabilities/42647

www.exploit-db.com/exploits/5677