Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Robert Brown

Researcher fromSymantec
#36528of 53,632
7.5Total CVSS
Vulnerabilities · 1
PT-2007-6941
7.5
2007-12-05
Beehive Forum · Beehive Forum · CVE-2007-6014
**Name of the Vulnerable Software and Affected Versions** Beehive Forum versions 0.7.1 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `t dedupe` parameter in the "post.php" file. **Recommendations** For Beehive Forum versions 0.7.1 and earlier, avoid using the `t dedupe` parameter in the post.php file until a fix is available. Consider restricting access to the post.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.