CVE-2007-3589

UNRATED

Description

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showthread.php or (2) showboard.php.

Affected products

b1g / b1gbb2.24 – 2.24

References

MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/35129
MISChttp://www.securityfocus.com/bid/24696
MISChttp://osvdb.org/38950
MISChttp://osvdb.org/38951
EXPLOIThttps://www.exploit-db.com/exploits/4122