CVEvulnerability

CVE-2006-0669

7.5 HIGH Published 2006-02-13 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-02-13
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments

Affected configurations

• gasoft gas forum light

References

http://securitytracker.com/id?1015600 Exploit
http://www.attrition.org/pipermail/vim/2006-February/000561.html www.attrition.org
http://www.osvdb.org/23509 www.osvdb.org
http://www.securityfocus.com/bid/16563 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/24616 exchange.xforce.ibmcloud.com
http://securitytracker.com/id?1015600 Exploit
http://www.attrition.org/pipermail/vim/2006-February/000561.html www.attrition.org
http://www.osvdb.org/23509 www.osvdb.org
http://www.securityfocus.com/bid/16563 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/24616 exchange.xforce.ibmcloud.com