NuytsTech Security

CVE-2008-1408

by ·

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a banner_out action.

Date published : 2008-03-20

http://www.securityfocus.com/bid/28272

http://www.phpbp.com/filedownload-phpbp2-RC3-204-fix5_22.html

Tags: