philboard v1.02 sql injection Vulnerability

vendor:

philboard v1.02

by:

ViRuS_HiMa

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: philboard v1.02

Affected Version From: v1.02

Affected Version To: v1.02

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2007

philboard v1.02 sql injection Vulnerability

philboard v1.02 is an ASP Web Forum vulnerable to SQL Injection. The vulnerability exists in the buscahost_forum.asp?forumid=1 parameter, which can be exploited by appending a malicious SQL query to the parameter value.

Mitigation:

Input validation should be used to prevent SQL injection attacks. Additionally, parameterized queries should be used to prevent SQL injection.

Source

Exploit-DB raw data:

[+]##############################################
[+] |____ViRuS_HiMa@YouR SyS__|__\ #
[+] |______________________|___||\*___ #
[+] |______________________|___||""|"*\___, #
[+] |______________________|___||""|*"|___|| #
[+] "([ (@)''(@)""""""(|*(@)(@)********(@)* #
[%] #
[+] philboard v1.02 sql injection Vulnerability #
[+]===========================================================================||
[*] Script : philboard v1.02 ||
[!] Author : ViRuS_HiMa ||
[!] Site : WwW.hell-z0ne.org - www.pakhaxors.com ||
[!] E-Mail : eGypT_GoVeRnMenT[at]HoTmaiL[dot]CoM ||--------
[!] Location : Cairo-007 ||
[!]===================================================================||
[!] philboard is Asp Web Forum . ||
[!]===================================================================||
[!] Vuln in : buscahost_forum.asp?forumid=1 ||
[#] ||
[%] Use : localhost/path/buscahost_forum.asp?forumid=Sql ||
[!] ||
[!]===================================================================||
[!]Greetz 2 Allah - Muslim Hackers - Dj.h@xor - And oTherz . ||
[*]===================================================================||