CVE-2006-0123

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.24% chance of exploitation in the next 30 days, 87th percentile

Published

2006-01-09

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://evuln.com/vulns/15/summary.html

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6640

References

• CVE Record
• NVD entry

Related

• CVE-2006-0115
• CVE-2006-0124
• CVE-2006-0110
• CVE-2006-0125
• CVE-2006-0104
• CVE-2006-0133