intext:"Powered by SimpleBBS v1.1"*

• SHDB
• 2587 阅读

• 日期：2005-12-14
• 类别：
  • Advisories and Vulnerabilities
• 作者：anonymous
• 语法：intext:"Powered by SimpleBBS v1.1"*

• Vulnerability DescriptionSimpleBBS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the search module not properly sanitizing user-supplied input to undisclosed variables. This may allow an attacker to inject or manipulate SQL queries in the backend database. No further details have been provided.Solution DescriptionCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.Products:* SimpleMedia SimpleBBS 1.1 AffectedVulnerability classification:* Remote vulnerability* Input manipulation attack* Impact on integrity* Exploit unavailable* VerifiedMore info on Vuln: http://www.securityfocus.com/bid/15594