CVEvulnerability
CVE-2006-5635
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.
Affected configurations
• web wiz forums web wiz forums 6.34
• web wiz forums web wiz forums 7.0
• web wiz forums web wiz forums 7.0.1
• web wiz forums web wiz forums 7.0 beta1
• web wiz forums web wiz forums 7.5
• web wiz forums web wiz forums 7.7a
• web wiz forums web wiz forums 7.7b
• web wiz forums web wiz forums 7.8
• web wiz forums web wiz forums 7.9
• web wiz forums web wiz forums 7.51
• web wiz forums web wiz forums 7.91
• web wiz forums web wiz forums 8.0 alpha
• web wiz forums web wiz forums 8.04
References
- http://securityreason.com/securityalert/1801 securityreason.com
- http://www.securityfocus.com/archive/1/450034/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20778 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29898 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/1801 securityreason.com
- http://www.securityfocus.com/archive/1/450034/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20778 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29898 exchange.xforce.ibmcloud.com