sbb-sql.txt

netVigilance Security Advisory 19 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the idea...

CVE-2007-1902

SonicBB 1.0 is affected by multiple SQL injection vulnerabilities (CVE-2007-1902). The flaws allow remote attackers to run arbitrary SQL via search.php (parameters part and by) and viewforum.php (id). The public reports describe exploitation can occur when magic_quotes_gpc is Off, enabling attack...