BBCode img XSS and SQL-inj in discussion-xhawk.net

Summary for BBCode img XSS and SQL-inj in discussion-xhawk.net

Vulnerability
BBCode img XSS and SQL-inj in discussion-xhawk.net
Discovered
2006.03.04
Last Update
2006.03.14 Exploitation code published
ID
EV0092
CVE
CVE-2006-1264 CVE-2006-1265
Risk Level
medium
Type
Multiple Vulnerabilities
Status
Unpatched. No reply from developer(s)
Vendor
xhawk.net
Vulnerable Software
discussion
Version
2.0 beta2
PoC/Exploit
Available
Solution
Not available
Discovered by
Aliaksandr Hartsuyeu (eVuln.com)

Order Source Code Review made by eVuln team

Protect a site by source code review of your site or web application made by our team.The work will be done by specialists in web application security.