Grboard CVE-2011-5091 SQL-Injection Vulnerability
BID:73599
Info
Grboard CVE-2011-5091 SQL-Injection Vulnerability
| Bugtraq ID: | 73599 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-5091 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2012 12:00AM |
| Updated: | May 23 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Grboard Grboard 1.8.6.5 Community |
| Not Vulnerable: | |
Discussion
Grboard CVE-2011-5091 SQL-Injection Vulnerability
Grboard is prone to a sql-injection vulnerability. Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.
Grboard is prone to a sql-injection vulnerability. Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.
Exploit / POC
Grboard CVE-2011-5091 SQL-Injection Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Grboard CVE-2011-5091 SQL-Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
References
Grboard CVE-2011-5091 SQL-Injection Vulnerability
References:
References: