header-logo
Suggest Exploit
vendor:
AntiBoard
by:
Unknown
5.5
CVSS
MEDIUM
SQL Injection, Cross-Site Scripting (XSS)
89, 79
CWE
Product Name: AntiBoard
Affected Version From: 2000.7.2
Affected Version To: 2000.7.2
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Multiple vulnerabilities in AntiBoard application

The AntiBoard application is vulnerable to multiple instances of SQL injection and a cross-site scripting vulnerability. These vulnerabilities are caused by insufficient sanitization of user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary SQL queries, manipulate database contents, and execute malicious scripts in the context of the victim's browser.

Mitigation:

To mitigate these vulnerabilities, it is recommended to implement proper input validation and sanitization techniques. Additionally, using prepared statements or parameterized queries can help prevent SQL injection attacks. Regularly updating the application to the latest version is also advised.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10821/info
 
Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.
 
AntiBoard versions 0.7.2 and prior are affected by these issues.

/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>

Navigation

Suggest Exploit

Services By CQR