Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote malicious users to execute arbitrary SQL commands via the (1) showmember parameter in a members action and the (2) thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
haudenschilt battlenet clan script 1.5.2 |