CVE-2008-4431 | BDVDB-2026-32689 Detail

Description#

SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the clean_string function in includes/functions.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/31439
https://exchange.xforce.ibmcloud.com/vulnerabilities/44403
http://forums.xaos-ia.com/?topic=765
http://www.securityfocus.com/bid/30656

Exploit#

No public exploit known

History#

Version 12008-10-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.