CVEvulnerability
CVE-2006-0123
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.
Affected configurations
• adn forum adn forum 1.0
• adn forum adn forum 1.0b
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://evuln.com/vulns/15/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18300 Vendor Advisory
- http://securitytracker.com/id?1015445 Exploit
- http://www.osvdb.org/22240 Exploit
- http://www.osvdb.org/22241 Exploit
- http://www.securityfocus.com/archive/1/420990/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16157 Exploit
- http://www.vupen.com/english/advisories/2006/0077 Vendor Advisory
- http://evuln.com/vulns/15/summary.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18300 Vendor Advisory
- http://securitytracker.com/id?1015445 Exploit
- http://www.osvdb.org/22240 Exploit
- http://www.osvdb.org/22241 Exploit
- http://www.securityfocus.com/archive/1/420990/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16157 Exploit
- http://www.vupen.com/english/advisories/2006/0077 Vendor Advisory