high7.5
CVE-2006-7088
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1…
Impact
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) logon_user.php and (2) update_profile.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Php Forum | Simple Php Forum | Versions 0.1, 0.2, 0.3 |
References
- NVD record
- CVE.org record
- http://sourceforge.net/project/shownotes.php?release_id=462654
- http://www.vupen.com/english/advisories/2006/4496
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30252
- http://sourceforge.net/project/shownotes.php?release_id=462654
- http://www.vupen.com/english/advisories/2006/4496
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30252