2 results (0.001 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

04 Dec 2006 — SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572. Vulnerabilidad de inyección SQL en viewthread.php de Oxygen (O2PHP Bulletin Board) 1.1.3 y anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro pid, un vector distinto de CVE-2006-1572. • https://www.exploit-db.com/exploits/2810 •

CVSS: 9.8EPSS: 2%CPEs: 5EXPL: 1

01 Apr 2006 — SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action. • https://www.exploit-db.com/exploits/27535 •