CVE-2009-1947

SQL injection vulnerability in the UnbDbEncode function in unblib/database.lib.php in Unclassified NewsBoard UNB 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686...

CVE-2009-1947

UNB (Unclassified NewsBoard) 1.6.4 is affected by a SQL injection in UnbDbEncode (unb_lib/database.lib.php). The flaw allows an attacker to craft the Query parameter in forum.php search action to execute arbitrary SQL. The vulnerability vector is via remote access (network) with no authentication...