idboard113SQL.txt

============================================================ Title: ID Board 1.1.3 SQL Injection Vulnerability Vulnerability Discovery: me, myself and I Date: 09/07/2005 Severity: Remote users can fetch MD5 Passwd Hash. Affected version: 1.1.3 free only one tested Vendor: http://www.id-team.com/...

CVE-2005-2197: Undefined Security Weakness

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php...