joelz bulletin board 0.9.9rc3 - Multiple SQL Injections

joelz bulletin board 0.9.9rc3 - Multiple SQL Injections ----------------------------Information------------------------------------------------ +Name : joelz bulletin board = 0.9.9rc3 multiple SQL Injection & Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Email : [email protected] +Date :...

CVE-2005-3871: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...