CVE-2006-2034

SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.31% chance of exploitation in the next 30 days, 82th percentile

Published

2006-04-26

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/431793/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1713

References

• CVE Record
• NVD entry

Related

• CVE-2006-2032
• CVE-2006-2037
• CVE-2006-2029
• CVE-2006-2040
• CVE-2006-2028
• CVE-2006-2043