freeForum 1.x "cat" "thread" SQL inj.

freeForum 1.x "cat" "thread" SQL inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html Vendor:http://soft.zoneo.net/freeForum/ affected version: 1.1 and prior Vuln. description: Input passed to the "cat" and...

FreeForum 1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15559/info freeForum is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation...