"Powered by WowBB" -site:wowbb.com

• SHDB
• 1544 阅读

• 日期：2004-10-26
• 类别：
  • Advisories and Vulnerabilities
• 作者：anonymous
• 语法："Powered by WowBB" -site:wowbb.com

• WowBB is reportedly affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content and SQL database queries.An attacker can leverage these issues to manipulate or reveal database contents through SQL injection attacks as well as carry out other attacks and steal cookie-based authentication credentials through cross-site scripting attacks.http://www.securityfocus.com/bid/11429http://www.wowbb.com/