CVE-2006-2822

2006-06-0517:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.0%

JSON

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

References

colander.altervista.org/advisory/CAForum.txt

secunia.com/advisories/20411

securityreason.com/securityalert/1026

securitytracker.com/id?1016212

www.securityfocus.com/archive/1/435613/100/0/threaded

www.vupen.com/english/advisories/2006/2117