NVD

Id
61847  
Name
CVE-2006-3168  
Description
SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-22  
Modified Date
2011-03-07  
Seq
2006-3168  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
320188 61847 CVE-2006-3168 1124  View
320189 61847 CVE-2006-3168 http://www.acid-root.new.fr/advisories/csforum081.txt  View
320190 61847 CVE-2006-3168 http://www.comscripts.com/scripts/php.cs-forum.643.html  View
320191 61847 CVE-2006-3168 20060611 CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure  View
320192 61847 CVE-2006-3168 ADV-2006-2314  View
320193 61847 CVE-2006-3168 csforum-read-index-sql-injection(27176)  View

Related JVN