CVE-2004-1966

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains multiple SQL injection flaws allowing remote SQL command execution via parameters: FID in board.php; sortorder, perpage, or id in member.php; forums in search.php; and PID or FID in post.php. Root cause is unvalidated input in these endpoint...