CVE-2006-0444

🗓️ 26 Jan 2006 22:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 56 Views🌐 WEB

CVE-2006-0444 SQL injection vulnerability in Phpclanwebsite 1.23.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2006-0444	26 Jan 200622:00	–	cvelist
Exploit DB	Phpclanwebsite 1.23.1 - SQL Injection	25 Jan 200600:00	–	exploitdb
EUVD	EUVD-2006-0451	7 Oct 202500:30	–	euvd
NVD	CVE-2006-0444	26 Jan 200622:03	–	nvd
Prion	Sql injection	26 Jan 200622:03	–	prion
Prion	Sql injection	8 Jan 200919:30	–	prion

NVD

Node

phpclanwebsite phpclanwebsiteMatch1.23.1

Source	Link
securityfocus	www.securityfocus.com/bid/16391
osvdb	www.osvdb.org/22720
securityfocus	www.securityfocus.com/archive/1/423145/100/0/threaded
secunia	www.secunia.com/advisories/18597
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/24355
osvdb	www.osvdb.org/22722
vupen	www.vupen.com/english/advisories/2006/0342
h4cky0u	www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt

Parameter	Position	Path	Description	CWE
par	query param	/$path/index.php	SQL injection via par parameter in forum post function	CWE-89
poll_id	query param	/$path/index.php	Possible SQL injection via poll_id parameter on the poll page (may also trigger XSS from error message)	CWE-89

16 Jun 2026 22:20Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

EPSS0.03047

cve-2006-0444 sql injection phpclanwebsite pcw 1.23.1 remote attackers xss nvd