CVE-2006-1000

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.39% chance of exploitation in the next 30 days, 88th percentile

Published

2006-03-06

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.nukedx.com/?viewdoc=13
• http://www.nukedx.com/?viewdoc=14

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1528

References

• CVE Record
• NVD entry

Related

• CVE-2006-0996
• CVE-2006-1001
• CVE-2006-0992
• CVE-2006-1007
• CVE-2006-0986
• CVE-2006-1008