Security Advisory

CVE-2009-1947

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-06-05 21:00:00

Last updated 2024-08-07 05:27:54

Assigner mitre

State PUBLISHED

Description

SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686.

← Browse all CVEs View on cve.org ↗