Vulnerabilities > CVE-2004-2062 - Unspecified vulnerability in Antiboard

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
antiboard
nessus
exploit available
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters.

Vulnerable Configurations

Part Description Count
Application
Antiboard
7

Exploit-Db

descriptionAntiBoard 0.6/0.7 antiboard.php Multiple Parameter SQL Injection. CVE-2004-2062. Webapps exploit for php platform
idEDB-ID:24329
last seen2016-02-02
modified2004-07-28
published2004-07-28
reporterJosh Gilmour
sourcehttps://www.exploit-db.com/download/24329/
titleAntiBoard 0.6/0.7 antiboard.php Multiple Parameter SQL Injection

Nessus

NASL familyCGI abuses
NASL idANTIBOARD_SQL_INJECTION.NASL
descriptionThe remote host appears to be running the AntiBoard bulletin board system. There are multiple SQL injection vulnerabilities in the remote software that may allow an attacker to execute arbitrary SQL commands on the remote host, and possibly bypass the authentication mechanisms of AntiBoard. Note, AntiBoard is also affected by a cross-site scripting vulnerability, however Nessus has not tested this.
last seen2020-06-01
modified2020-06-02
plugin id14187
published2004-08-02
reporterThis script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/14187
titleAntiBoard antiboard.php Multiple Parameter SQL Injection

References