• info
• discussion
• exploit
• solution
• references

Cholod MySQL Based Message Board Mb.CGI SQL Injection Vulnerability

This issue can be exploited via a web client.

http://www.example.com/cgi-bin/mb.cgi?action=showmessage&topicnumber=1&threadnumber=7
&category=Computer&topic=Linux&username=K-sPEcial