SQL Injection in Adn Forum
CVE-2006-0123
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.
Vulnerability class: SQL Injection
EPSS: 0.032 (87.0th percentile) — read the EPSS interpretation.
Affected products
- Adn_forum — versions 1.0, 1.0b
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, Exploit, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)