CVE-2006-2740

2006-06-0110:00:00

mitre

www.cve.org

8.7 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.4%

JSON

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.

References

secunia.com/advisories/20356

securityreason.com/securityalert/1011

securitytracker.com/id?1016172

www.nukedx.com/?getxpl=33

www.nukedx.com/?viewdoc=33

www.securityfocus.com/archive/1/435281/100/0/threaded

www.securityfocus.com/bid/18147

www.vupen.com/english/advisories/2006/2035

exchange.xforce.ibmcloud.com/vulnerabilities/26826