SQL injection vulnerability in printthread.php in UBB.Threads allows remote attackers to execute arbitrary SQL commands via the main parameter.

The remote host is running a version of UBB.threads that fails to correctly parse multiple PHP scripts.  A remote attacker can send malformed HTTP requests that, when processed, forces the UBB.threads server to execute arbitrary database commands or inject malicious code into user browsers.
As a result, a remote attacker can pass malicious input to database queries, potentially resulting in data exposure, modification of the query logic, or even data modification or attacks against the database itself.

The remote host is running a version of UBB.threads that suffers from multiple vulnerabilities due to insufficient input validation - local file inclusion, HTTP response splitting, SQL injection, and cross-site scripting.  These flaws may allow an attacker to completely compromise the affected installation of UBB.threads.

The remote host is running a version of UBB.threads that fails to sufficiently sanitize the 'Number' parameter before using it in SQL queries in the editpost.php script.  As a result, a remote attacker can pass malicious input to database queries, potentially resulting in data exposure, modification of the query logic, or even data modification or attacks against the database itself.

ID	Name	Product	Family	Severity
3032	UBB.threads < 6.5.2 Beta 2 XSS / SQL Injection	Nessus Network Monitor	CGI	high
18098	UBB.threads < 6.5.2 beta Multiple Vulnerabilities	Nessus	CGI abuses	high
2699	UBB.threads < 6.5.1.1 editpost.php SQL Injection	Nessus Network Monitor	CGI	high

Detections

Analytics

CVE-2005-1199

critical

Tenable Plugins

high

high

high