CVE-2003-1185 - Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to injec

CVE-2003-1185

Summary

Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center, (2) Announcements, (3) admin/calendar.php, and (4) showevent.php.

References

Vulnerable Configurations

cpe:2.3:a:thwboard:thwboard:2.8_beta:*:*:*:*:*:*:*
cpe:2.3:a:thwboard:thwboard:2.8_beta:*:*:*:*:*:*:*
cpe:2.3:a:thwboard:thwboard:2.81_beta:*:*:*:*:*:*:*
cpe:2.3:a:thwboard:thwboard:2.81_beta:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	8961
confirm	http://sourceforge.net/project/shownotes.php?release_id=195009
osvdb	2758 4838 4840 4841
secunia	10120
xf	thwboard-multiple-sql-injection(13583)

Last major update

11-07-2017 - 01:29

Published

03-11-2003 - 05:00

Last modified

11-07-2017 - 01:29