high7.5Public exploit code
CVE-2006-5635
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Web Wiz Forum 6.34/7.x - 'search.asp' SQL Injection2006-10-28 · webapps · asp · Verified
Impact
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Web Wiz Forums | Web Wiz Forums | Versions 6.34, 7.0, 7.0.1, 7.0_beta1, 7.5, 7.7a |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1801
- http://www.securityfocus.com/archive/1/450034/100/0/threaded
- http://www.securityfocus.com/bid/20778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29898
- http://securityreason.com/securityalert/1801
- http://www.securityfocus.com/archive/1/450034/100/0/threaded
- http://www.securityfocus.com/bid/20778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29898