SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubb.threads | Ubbcentral | 3.4 (including) | 3.4 (including) |
| Ubb.threads | Ubbcentral | 3.5 (including) | 3.5 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=109839925207038\u0026w=2
- http://www.securityfocus.com/bid/11502
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17821
- http://marc.info/?l=bugtraq\u0026m=109839925207038\u0026w=2
- http://www.securityfocus.com/bid/11502
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17821