3 matches found
Sql injection
SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action...
CVE-2007-6639
SQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewdir action...
CVE-2007-6639
CVE-2007-6639 describes a SQL injection vulnerability in IPTBB 0.5.4 and earlier, where the id parameter in the viewdir action of index.php can be exploited to execute arbitrary SQL commands remotely. Affected software is IPTBB (0.5.4 and earlier). The root cause is improper input handling in the...