CVE-2010-4812
6kbbs 8.0 build 20100901 - SQL Injection via tids[] or msgids[] Parameters
Title source: llmDescription
Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php.
References (5)
Core 5
Core References
Various Sources x_refsource_misc
http://bbs.wolvez.org/viewtopic.php?id=180
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/63286
Patch x_refsource_misc
http://www.6kbbs.net/view-487.html
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/42204
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/63285
Scores
EPSS
0.0095
EPSS Percentile
57.6%
Details
CWE
CWE-89
Status
published
Products (1)
6kbbs/6kbbs
8.0
Published
Jul 08, 2011
Tracked Since
Feb 18, 2026