Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
UBB.threads 6 SQL Injection Mar 11 2005 04:58PM
kre0n mail ru


ADZ Security Team
===================
Info

Program: UBB.threads
Version: 6
Module: editpost.php
Bug type: SQL Injection
Vendor site: http://www.ubbcentral.com/ubbthreads/
===================
Bug discription

at editpost.php we can see this code:
// START
$Cat = get_input("Cat","get");
$Board = g...

[ more ]  




 

Privacy Statement
Copyright 2008, SecurityFocus