Vulnerabilities > CVE-2007-3589 - SQL Injection vulnerability in B1G B1Gbb 2.24

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
b1g
exploit available
NVD
Published: 2007-07-05
Updated: 2017-09-29

Summary

Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) showthread.php or (2) showboard.php.

Vulnerable Configurations

Part Description Count
Application
B1G
1

Exploit-Db

descriptionb1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities. CVE-2007-3589,CVE-2007-3590. Webapps exploit for php platform
fileexploits/php/webapps/4122.txt
idEDB-ID:4122
last seen2016-01-31
modified2007-06-28
platformphp
port
published2007-06-28
reporterGoLd_M
sourcehttps://www.exploit-db.com/download/4122/
titleb1gbb 2.24.0 SQL Injection / XSS Remote Vulnerabilities
typewebapps

References