Secunia

Some vulnerabilities have been reported in MegaBBS, where one has an unknown impact and others can be exploited by malicious people to conduct script insertion, cross-site scripting, and SQL injection attacks.

1) Input passed to the "fid" parameter in "thread-post.asp" can be exploited to inject malicious characters into HTTP headers. This may allow execution of arbitrary HTML and script code in a user's browser session in context of an affected site.

2) Input passed to the "sortdir" and "criteria" parameters in "ladder-log.asp" and the "memberid" and "teamid" parameters in "view-profile.asp" isn't sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

3) An unspecified error exists in "/forum/statistics/user-listing.asp" with an unknown impact.

The vulnerabilities have been reported in version 2.1. Other versions may also be affected.

Solution
1, 3) Apply update:
Further details available in Customer Area

Provided and/or discovered by
1-2) pigrelax
3) Reported by vendor

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area