CVE-2006-1766

2006-04-1310:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.002

Percentile

51.8%

JSON

Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.php, (3) menuid parameter in (b) plugin.php and © forumthread.php, and (4) msgid parameter in forumthread.php.