| Package | Affected versions | Patched versions |
|---|---|---|
| megabbs | = 2= 2.1 |
SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free