Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) table and (2) messageID parameters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Edmobbs | Edmobbs | * | 0.9 (including) |