CVE-2004-0343

The CVE-2004-0343 entry concerns YaBB SE 1.5.4 through 1.5.5b, where multiple SQL injection flaws enable remote attackers to execute arbitrary SQL. The vulnerable vectors are in ModifyMessage.php via the msg parameter and via the postid parameter. Impact is described as complete confidentiality, ...