PT-2004-2529 · Ubb · Ubb.Threads

Florian Rock + 1 · Published 2004-10-21 · Updated 2017-07-11 · CVE-2004-1622

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UBB.threads versions 3.4.x

Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the Name parameter in the "dosearch.php" endpoint.

Recommendations For UBB.threads versions 3.4.x, update to a version that fixes this issue to prevent the execution of arbitrary SQL statements.

Exploit

Fix

Related Identifiers

CVE-2004-1622

Affected Products

Ubb.Threads

References · 5

• 🔥 https://exploit-db.com/exploits/24698 · Exploit
• 🔥 http://securityfocus.com/bid/11502 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1622 · Security Note
• http://marc.info/?l=bugtraq&m=109839925207038&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17821 · Note