Check Point Advisories

Venom Board post.php3 topic_id Parameter SQL Injection - Ver2 (CVE-2006-0160)

Check Point Reference:	CPAI-2014-0778
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2006-0160
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	An SQL injection vulnerability has been reported in Venom Board. A remote attacker could exploit this vulnerability by sending specaially crafted parent root and topic_id parameters to post.php. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system.