CVE-2006-1708

SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.52% chance of exploitation in the next 30 days, 74th percentile

Published

2006-04-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1662

Security advisories

• http://secunia.com/advisories/19609
• http://www.securityfocus.com/bid/17456

References

• CVE Record
• NVD entry