CVE-2014-9560

Description

References

• packetstormsecurity.com/files/129888/SoftBB-0.1.3-SQL-Injection.html
• seclists.org/fulldisclosure/2015/Jan/20
• tetraph.com/security/cves/cve-2014-9560-softbb-net-softbb-sql-injection-security-vulnerability
• securityfocus.com/bid/71986

softbb 的其他漏洞

• CVE-2014-9561中危 4.3Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject arbitrary web script …
• CVE-2006-4633中危 5.0index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page[] paramete…
• CVE-2006-4632高危 7.5Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-4631中危 6.5Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to u…
• CVE-2006-4593中危 6.8Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HT…