CVE-2008-6970

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum[] array parameter.

Published: Aug 13, 2009
Updated: Apr 13, 2023
CVE: CVE-2008-6970
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
ubbcentral / ubb.threads	5.5.1	5.5.1.x
ubbcentral / ubb.threads	6.5	6.5.x
ubbcentral / ubb.threads	6.5.1	6.5.1.x
ubbcentral / ubb.threads	6.1	6.1.x
ubbcentral / ubb.threads	6.2.1	6.2.1.x
ubbcentral / ubb.threads	6.0.1	6.0.1.x
ubbcentral / ubb.threads	6.4.4	6.4.4.x
ubbcentral / ubb.threads	6.4.3	6.4.3.x
ubbcentral / ubb.threads	6.4.2	6.4.2.x
ubbcentral / ubb.threads	6.4.1	6.4.1.x
ubbcentral / ubb.threads	3.5	3.5.x
ubbcentral / ubb.threads	3.4	3.4.x
ubbcentral / ubb.threads	6.2.2	6.2.2.x
ubbcentral / ubb.threads	6.2	6.2.x
ubbcentral / ubb.threads	6.5.1.1	6.5.1.1.x
ubbcentral / ubb.threads	6.5.3	6.5.3.x
ubbcentral / ubb.threads	7.0	7.0.x
ubbcentral / ubb.threads	5.0	5.0.x
ubbcentral / ubb.threads	6.5.2	6.5.2.x
ubbcentral / ubb.threads	6.0.3	6.0.3.x
ubbcentral / ubb.threads	6.1.1	6.1.1.x
ubbcentral / ubb.threads	6.4	6.4.x
ubbcentral / ubb.threads	7.2	7.2.x
ubbcentral / ubb.threads	6.5.2_beta2	6.5.2_beta2.x
ubbcentral / ubb.threads	6.3.1	6.3.1.x
ubbcentral / ubb.threads	6.0.2	6.0.2.x
ubbcentral / ubb.threads	6.3	6.3.x
ubbcentral / ubb.threads	6.2.3	6.2.3.x
ubbcentral / ubb.threads	7.1	7.1.x
ubbcentral / ubb.threads	-	7.3.1.x
ubbcentral / ubb.threads	6.0	6.0.x

Vulnerability Database

289,697

CVE-2008-6970