Aceboard forum, SQL injection

From: <karmaguedon_at_hotmail.com>
Date: 3 Aug 2007 12:13:39 -0000

('binary' encoding is not supported, stored as-is) Aceboard is prone to a sql injection vulnerability because it fails to properly sanitize user-supplied input into Recherche.php form.

An attacker can exploit this issue to modify initial query and reveal information from mysql databse.

see u, karmaguedon
Received on Aug 03 2007