Sql injection

2014-03-1914:17:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.8%

JSON

Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) subject or (2) content parameter.

CPENameOperatorVersion
gnuboardeq4.34.20
gnuboardeq4.31.3
gnuboardeq4.33.2
gnuboardle5.0
gnuboardeq4.34.21
gnuboardeq4.31.4

Name	Operator	Version
gnuboard	eq	4.34.20
gnuboard	eq	4.31.3
gnuboard	eq	4.33.2
gnuboard	le	5.0
gnuboard	eq	4.34.21
gnuboard	eq	4.31.4

References

seclists.org/fulldisclosure/2014/Mar/299

www.securityfocus.com/bid/66228

exchange.xforce.ibmcloud.com/vulnerabilities/91814