CVE-2007-1902

Publication date

2007-05-14 21:00:00

Family

mitre

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by parameters to (a) search.php, or the (2) id parameter to (b) viewforum.php.