CVE-2004-2145

CVE-2004-2145 is a SQL injection vulnerability affecting PD9 Software MegaBBS 2 and 2.1. The flaw allows remote attackers to inject arbitrary SQL through parameters: sortdir or criteria to ladder-log.asp, and memberid or teamid to view-profile.asp. Root cause is improper handling of user-supplied...