Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote malicious users to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
aweb labs awebbb 1.2 |
Vulmon