Vulnerabilities > CVE-2004-2145 - Unspecified vulnerability in PD9 Software Megabbs 2/2.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
pd9-software
NVD
Published: 2004-12-31
Updated: 2024-11-20

Summary

SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp.

Vulnerable Configurations

Part Description Count
Application
Pd9_Software
2

References