967vdb entry
http://www.securityfocus.com/bid/967 CVE-2000-0125
Wired Community Software WWWThreads 5.0 - SQL Command Input
Record summary
CVE-2000-0125 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWired Community Software WWWThreads 5.0 - SQL Command InputExploitDB exploitby rain forest puppyNot analyzed1 file
References
420000203 RFP2K01 - "How I hacked Packetstorm" (wwwthreads advisory)mailing list
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000@eight.wiretrip.net nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2000-0125