[VulnWatch] SQL injection in BttlxeForum
From: SecurityTracker (email@example.com)
Date: Wed, 23 Apr 2003 22:06:04 -0400 From: SecurityTracker <firstname.lastname@example.org> To: email@example.com
SAUDI_DEFACERZ reported an input validation vulnerability in the 'bttlxeForum' forum
software earlier today. A remote user can gain full control over the application.
You can see the original message from SAUDI_DEFACERZ at:
The vendor responded rapidly to provide a fix:
23 April 2003, 14:43 UTC/GMT - Vendor notified
23 April 2003, 14:56 UTC/GMT - Vendor responded
23 April 2003, 16:03 UTC/GMT - Vendor posted fix
23 April 2003, 16:11 UTC/GMT - Vendor responded to indicate that a fix was available.
See the vendor's bug fix announcement at:
CVE Number is CAN-2003-0215.