Sql injection

2007-10-2317:46:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.6%

JSON

SQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a tnews action.

CPENameOperatorVersion
bbportalseq1.5.10
bbportalseq2.0
bbportalseq1.6.2
bbportalseq1.5.11

Name	Operator	Version
bbportals	eq	1.5.10
bbportals	eq	2.0
bbportals	eq	1.6.2
bbportals	eq	1.5.11

References

www.securityfocus.com/bid/26149

exchange.xforce.ibmcloud.com/vulnerabilities/37346

www.exploit-db.com/exploits/4550