Security Advisory

CVE-2006-1811

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-04-18 10:00:00

Last updated 2024-08-07 17:27:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Location, (12) Signature, and (13) Sub-Titles fields in the user profile; or (14) flexbb_password field in a cookie.

← Browse all CVEs View on cve.org ↗