SQL IN Open Bulletin Board

[ABDUCTER_MINDS@YAHOO.COM]

Class: Input Validation Error
Remote: Yes
Local: Yes
Credit: ABDUCTER ----> ABDUCTER_MINDS@YAHOO.COM {OR} ABDUCTER_MINDS76@HOTMAIL.COM
Vulnerable: Powered by Open Bulletin Board ALL VERSION
************************************************** ****
info :- openbb is APOPULAR FORUM HAVE MANY VERSION U CAN FIND SOURCE OF FORUM IN
http://www.openbb.com/
************************************************** ****
discussion :- there is many sql in
(board.php) as wwww.victim.com/openbb/board.php?FID=[sql]
(read.php) as www.victim.com/openbb/read.php?TID=[sql]
(member.php) as www.victim.com/openbb/member.php?action=profile&UID=[sql]

************************************************** ****
CREDITS :-
FOR ALL ARAB [EGYPT]
WWW.S4A.CC
TO MY LOVE (N0N0)
DEVIL_00

[security curmudgeon]

Each of these has been previously disclosed it seems:

: discussion :- there is many sql in
: (board.php) as wwww.victim.com/openbb/board.php?FID=[sql]

2004-04-24
http://www.gulftech.org/04242004.php

: (read.php) as www.victim.com/openbb/read.php?TID=[sql]

2005-05-12
http://archives.neohapsis.com/archives/bugtraq/2005-05/0175.html

: (member.php) as www.victim.com/openbb/member.php?action=profile&UID=[sql]

2004-04-24
http://www.gulftech.org/04242004.php


I don't see any indication they were ever fixed, even though a year+ old.