medium6.4Public exploit code
CVE-2006-2697
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities2006-05-26 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy-Content Forums | Easy-Content Forums | Version 1.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/997
- http://www.securityfocus.com/archive/1/435140/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26804
- http://securityreason.com/securityalert/997
- http://www.securityfocus.com/archive/1/435140/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26804