EDB-23710

functional

YABB SE 1.5 - 'Quote' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor BaCkSpAcEpublished 2004-02-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-0291USmedium5.0Exploit
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan