CVE-2004-1864

Description

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15655

https://docs.xmbforum2.com/index.php?title=Security_Issue_History

http://www.securityfocus.com/bid/9983

http://www.osvdb.org/16886

http://securitytracker.com/id?1009561

http://marc.info/?l=bugtraq&m=108032355905265&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3