SQL Injection in Clantiger

CVE-2010-1863

SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the s_email parameter.

Vulnerability class: SQL Injection

EPSS: 0.011 (61.0th percentile) — read the EPSS interpretation.

Affected products

  • Clantiger — versions 1.0, 0.2, 1.1.1
  • N/a — versions n/a

Weakness classification (CWE)

References