CVEvulnerability
CVE-2012-4034
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php.
Affected configurations
• pbboard pbboard 2.1.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/84480 osvdb.org
- http://secunia.com/advisories/50153 Vendor Advisory
- http://www.pbboard.com/forums/t10352.html URL Repurposed
- http://www.pbboard.com/forums/t10353.html Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/bid/54916 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77501 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23101 Exploit
- http://osvdb.org/84480 osvdb.org
- http://secunia.com/advisories/50153 Vendor Advisory
- http://www.pbboard.com/forums/t10352.html URL Repurposed
- http://www.pbboard.com/forums/t10353.html Vendor Advisory, URL Repurposed
- http://www.securityfocus.com/bid/54916 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77501 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23101 Exploit