DeluxeBB 'newpost.php' SQL Injection Vulnerability

The host is running DeluxeBB and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbdeluxbbsqlinjectionvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ DeluxeBB 'newpost.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

DeluxeBB <= 1.3 newpost.php页面SQL注入漏洞

BUGTRAQ ID: 39962 CVE ID: CVE-2010-1859 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB的newpost.php页面没有正确地过滤用户所提交的SQL查询参数： //inserting thread $db-unbufferedquery"INSERT INTO ".$prefix."threads VALUES NULL, '$infofid', '".$COOKIE'memberid'."', '$subject', '$posticon', '0', '0', '$lock', '$pin', '0',...

CVE-2010-1859

DeluxeBB

CVE-2010-1859

creationtimestamp| type| source ---|---|--- 2010-05-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33945...