3 matches found
Sql injection
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2008-4093
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2008-4093
This entry details a SQL injection in YourOwnBux 3.1 and 3.2 beta affecting memberstats.php when magic_quotes_gpc is disabled. The vulnerability allows remote execution of arbitrary SQL commands via the user parameter. The NVD record assigns a CVSS v2 base score 6.8 (MEDIUM), with network attack ...