[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FD] FluxBB <= 1.5.6 SQL Injection



Anti-spam is awesome, but not in attachments. Replace all occurrences of ' () ' 
with '@' for the exploit to work.

-------- Original Message --------
From: secthrowaway@xxxxxxxxxxxxx
To: fulldisclosure@xxxxxxxxxxxx
Subject: [FD] FluxBB <= 1.5.6 SQL Injection
Date: Fri, 21 Nov 2014 02:23:30 -0500

> FluxBB version 1.5.6 and below suffers from a SQL injection vulnerability.
> 
> Solution: update to FluxBB 1.5.7
> 
> Working, automated PoC is attached.

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/