Security Advisory

CVE-2014-2339

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-19 14:00:00
Last updated 2024-08-06 10:14:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in bbs/ajax.autosave.php in GNUboard 5.x and possibly earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) subject or (2) content parameter.