CVE-2006-3168

2006-06-2300:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.1%

JSON

SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php.

References

secunia.com/advisories/20534

securityreason.com/securityalert/1124

www.acid-root.new.fr/advisories/csforum081.txt

www.comscripts.com/scripts/php.cs-forum.643.html

www.osvdb.org/26382

www.osvdb.org/26383

www.securityfocus.com/archive/1/436789/100/0/threaded

www.vupen.com/english/advisories/2006/2314

exchange.xforce.ibmcloud.com/vulnerabilities/27176