3 matches found
Sql injection
SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter...
6.8CVSS9.1AI score0.00909EPSS
SaveExploits2References4Affected Software1
CVE-2008-4093
This entry details a SQL injection in YourOwnBux 3.1 and 3.2 beta affecting memberstats.php when magic_quotes_gpc is disabled. The vulnerability allows remote execution of arbitrary SQL commands via the user parameter. The NVD record assigns a CVSS v2 base score 6.8 (MEDIUM), with network attack ...
6.8CVSS8.4AI score0.00909EPSS
SaveExploits2References4Affected Software1
20