high7.5Public exploit code
CVE-2006-3572
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure2006-07-07 · webapps · php · Verified
Impact
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Papoo | Papoo | through 3.0.0_rc3 Versions 2.1.2, 2.1.4, 2.1.5, 3.0.0, 3.0.0_beta1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20978
- http://securityreason.com/securityalert/1217
- http://securitytracker.com/id?1016461
- http://www.osvdb.org/27118
- http://www.securityfocus.com/archive/1/439518/100/0/threaded
- http://www.securityfocus.com/bid/18895
- http://www.vupen.com/english/advisories/2006/2713
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27640
- https://www.exploit-db.com/exploits/1993
- http://secunia.com/advisories/20978
- http://securityreason.com/securityalert/1217
- http://securitytracker.com/id?1016461
- http://www.osvdb.org/27118
- http://www.securityfocus.com/archive/1/439518/100/0/threaded
- http://www.securityfocus.com/bid/18895
- http://www.vupen.com/english/advisories/2006/2713
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27640
- https://www.exploit-db.com/exploits/1993