CVE-2006-1000

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.39% chance of exploitation in the next 30 days, 89th percentile

Published

2006-03-06

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.nukedx.com/?viewdoc=13
• http://www.nukedx.com/?viewdoc=14

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1528

Security advisories

• http://secunia.com/advisories/19024
• http://securitytracker.com/id?1015682
• http://www.securityfocus.com/bid/16818

References

• CVE Record
• NVD entry