CVE-2006-4632

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.03% chance of exploitation in the next 30 days, 90th percentile

Published

2006-09-08

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/445087/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2300

References

• CVE Record
• NVD entry

Related

• CVE-2006-4631
• CVE-2006-4633
• CVE-2006-4630
• CVE-2006-4634
• CVE-2006-4629
• CVE-2006-4636