CVE-2008-2816

CVE-2008-2816 affects Oxygen (O2PHP Bulletin Board) 2.0. The vulnerability is in post.php, exploitable via the repquote parameter in a reply action, allowing remote SQL injection. This is a different vector than CVE-2006-1572. According to the NVD record, the base metrics indicate a HIGH severity...

Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection

!/usr/bin/php -------------------------------------------------------\n"; exit1; print "\n Please be patient max=736 hits...\n MD5: "; $host = !pregmatch"/^http://\S/",$argv1,$hwttp ? $argv1 : $hwttp1; $path = $argv2; $usid = intval$argv3; $tabl = "o2members"; for$x=1; $x=32; $x++ for$y=48;...

O2PHP Oxygen 1.01.1 - post.php SQL Injection

O2PHP Oxygen 1.01.1 - post.php SQL Injection source: https://www.securityfocus.com/bid/17324/info Oxygen is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...