Fourtwosevenbb showthread.php ForumID Parameter SQL Injection - Ver2 (CVE-2006-0154)

An SQL injection vulnerability has been reported in 427BB Fourtwosevenbb. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

427BB 2.3.2 - SQL Injection

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Download Script : http://sourceforge.net/projects/fourtwosevenbb/files/ 3rr0r: ./fourtwosevenbb-2.3.2/showpost.php PoC : http://server/path/showpost.php?ForumID=1&post=SQL...