Sql injection

2009-06-0119:30:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.8%

JSON

Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action.

CPENameOperatorVersion
kensei_boardeq1.1.0
kensei_boardeq<= 2.0.0b

CPE	Name	Operator	Version
	kensei_board	eq	1.1.0
	kensei_board	eq	<= 2.0.0b

References

exchange.xforce.ibmcloud.com/vulnerabilities/50747

www.exploit-db.com/exploits/8802