• info
• discussion
• exploit
• solution
• references

ThWboard Multiple Input Validation Vulnerabilities

No exploit is required.

Example URI have been provided:

http://www.example.com/thwb/calendar.php?month=12&year='[SQL]

http://www.example.com/thwb/v_profile.php?user[userid]='[SQL]

http://www.example.com/thwb/misc.php?action=getlastpost&userid='[SQL]