CVE-2003-1185 Information

Description

Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center (2) Announcements (3) admin/calendar.php and (4) showevent.php.

Reference

http://secunia.com/advisories/10120 http://sourceforge.net/project/shownotes.php?release_id=195009 http://www.osvdb.org/2758 http://www.osvdb.org/4838 http://www.osvdb.org/4840 http://www.osvdb.org/4841 http://www.securityfocus.com/bid/8961 https://exchange.xforce.ibmcloud.com/vulnerabilities/13583