CVE-2008-6970
13.08.2009, 16:30
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.
| Vendor | Product | Version |
|---|---|---|
| ubbcentral | ubb.threads | 𝑥 ≤ 7.3.1 |
| ubbcentral | ubb.threads | 3.4 |
| ubbcentral | ubb.threads | 3.5 |
| ubbcentral | ubb.threads | 5.0 |
| ubbcentral | ubb.threads | 5.5.1 |
| ubbcentral | ubb.threads | 6.0 |
| ubbcentral | ubb.threads | 6.0.1 |
| ubbcentral | ubb.threads | 6.0.2 |
| ubbcentral | ubb.threads | 6.0.3 |
| ubbcentral | ubb.threads | 6.1 |
| ubbcentral | ubb.threads | 6.1.1 |
| ubbcentral | ubb.threads | 6.2 |
| ubbcentral | ubb.threads | 6.2.1 |
| ubbcentral | ubb.threads | 6.2.2 |
| ubbcentral | ubb.threads | 6.2.3 |
| ubbcentral | ubb.threads | 6.3 |
| ubbcentral | ubb.threads | 6.3.1 |
| ubbcentral | ubb.threads | 6.4 |
| ubbcentral | ubb.threads | 6.4.1 |
| ubbcentral | ubb.threads | 6.4.2 |
| ubbcentral | ubb.threads | 6.4.3 |
| ubbcentral | ubb.threads | 6.4.4 |
| ubbcentral | ubb.threads | 6.5 |
| ubbcentral | ubb.threads | 6.5.1 |
| ubbcentral | ubb.threads | 6.5.1.1 |
| ubbcentral | ubb.threads | 6.5.2 |
| ubbcentral | ubb.threads | 6.5.2_beta2:_beta2 |
| ubbcentral | ubb.threads | 6.5.3 |
| ubbcentral | ubb.threads | 7.0 |
| ubbcentral | ubb.threads | 7.1 |
| ubbcentral | ubb.threads | 7.2 |
𝑥
= Vulnerable software versions
References