UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection
From: dabdoub_mosikar@xxxxxxxxxxxx
Date: 25 Mar 2006 22:09:53 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

[+]UBBThreads 
[-]Founded By Moroccan Security Team
[+]we are [DaBDouB-MoSiKaR,simo64,ki11er,Dr.E-Vil,|ucifier]
[+]special 10x: to all friends SnIpEr_SA,Crash_OvEr_rIdE 
king-hacker,CiM-TeaM,ameer,Dranzelz,Esp!onLeRaVaGe and www.lezr.com
[+]Solution:Upgrade to a version 6.0.3
[-]exemple:http://[target]/ubbthreads/showflat.php?Cat=&Board=sciastro&Number=[sq]&page=0
[+]have nice day

Prev by Date: Re: recursive DNS servers DDoS as a growing DDoS problem
Next by Date: SQL Injection in SaphpLesson2.0
Previous by thread: Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll)
Next by thread: SQL Injection in SaphpLesson2.0
Index(es):
- Date
- Thread