CVE-2012-4034

Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to the send page, (2) email parameter to the forget page, (3) password parameter to the forum_archive page, (4) section parameter to the management page, (5) section_id parameter to the managementreply page, (6) member_id parameter to the new_password page, or (7) subjectid parameter to the tags page to index.php.

• CWE-89

• http://osvdb.org/84480
• http://secunia.com/advisories/50153Vendor Advisory
• http://www.pbboard.com/forums/t10352.htmlURL Repurposed
• http://www.pbboard.com/forums/t10353.htmlVendor Advisory, URL Repurposed
• http://www.securityfocus.com/bid/54916Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77501
• https://www.htbridge.com/advisory/HTB23101Exploit
• http://osvdb.org/84480
• http://secunia.com/advisories/50153Vendor Advisory
• http://www.pbboard.com/forums/t10352.htmlURL Repurposed
• http://www.pbboard.com/forums/t10353.htmlVendor Advisory, URL Repurposed
• http://www.securityfocus.com/bid/54916Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77501
• https://www.htbridge.com/advisory/HTB23101Exploit

Published

Aug 12, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4028Tridium Niagara AX Framework does not properly store credent…
• CVE-2012-4029Cross-site scripting (XSS) vulnerability in main/dropbox/ind…6.1
• CVE-2012-4030Chamilo before 1.8.8.6 does not adequately handle user suppl…7.5
• CVE-2012-4031Multiple directory traversal vulnerabilities in src/acloglog…
• CVE-2012-4032Open redirect vulnerability in the login page in WebsitePane…
• CVE-2012-4033Multiple unspecified vulnerabilities in the Zingiri Web Shop…
• CVE-2012-4035The new_password page in PBBoard 2.1.4 allows remote attacke…
• CVE-2012-4036Unrestricted file upload vulnerability in admin.php in PBBoa…
• CVE-2012-4037Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2012-4043Cross-site scripting (XSS) vulnerability in global-protect/l…
• CVE-2012-4045Multiple heap-based buffer overflows in bmp.w5s in Winamp be…
• CVE-2012-4046The D-Link DCS-932L camera with firmware 1.02 allows remote …