PT-2004-2958 · Antiboard · Antiboard

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2062

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AntiBoard versions 0.7.2 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the thread id, parent id, or mode parameters.

Recommendations For AntiBoard versions 0.7.2 and earlier, avoid using the thread id, parent id, or mode parameters in the antiboard.php file until a fix is available. As a temporary workaround, consider restricting access to the antiboard.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2004-2062

Affected Products

Antiboard

References · 7

• 🔥 http://securityfocus.com/bid/10821 · Exploit
• 🔥 https://exploit-db.com/exploits/24329 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2062 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16828 · Note
• http://marc.info/?l=bugtraq&m=109105610220965&w=2 · Note
• http://secunia.com/advisories/12137 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2062 · Note