PunBB profile.php id Parameter SQL Injection

According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'changeemail' parameter prior to using it in a SQL query. Once authenticated, an attacker can exploit this flaw to manipulate database queries,...

HRG007.txt

HRG - Hackerlounge Research Group Release: HRG007 Monday 03/01/05 427BB The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: 427BB Any Version --- General Information: 427BB Is a simple board...