CVE-2006-5736

🗓️ 06 Nov 2006 18:07:00Reported by [email protected]Type

SQL injection vulnerability in search.php in PunBB before 1.2.14 allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized

Reporter	Title	Published	Views	Family All 3
CVE	CVE-2006-5736	6 Nov 200618:00	–	cve
Cvelist	CVE-2006-5736	6 Nov 200618:00	–	cvelist
EUVD	EUVD-2006-5720	7 Oct 202500:30	–	euvd

NVD

Node

punbb punbbRange≤1.2.13

punbb punbbMatch1.0

punbb punbbMatch1.0.1

punbb punbbMatch1.0_alpha

punbb punbbMatch1.0_beta1

punbb punbbMatch1.0_beta1a

punbb punbbMatch1.0_beta2

punbb punbbMatch1.0_beta3

punbb punbbMatch1.0_rc1

punbb punbbMatch1.0_rc2

punbb punbbMatch1.1

punbb punbbMatch1.1.1

punbb punbbMatch1.1.2

punbb punbbMatch1.1.3

punbb punbbMatch1.1.4

punbb punbbMatch1.1.5

punbb punbbMatch1.2

punbb punbbMatch1.2.1

punbb punbbMatch1.2.2

punbb punbbMatch1.2.3

punbb punbbMatch1.2.4

punbb punbbMatch1.2.5

punbb punbbMatch1.2.6

punbb punbbMatch1.2.7

punbb punbbMatch1.2.8

punbb punbbMatch1.2.9

punbb punbbMatch1.2.10

punbb punbbMatch1.2.11

punbb punbbMatch1.2.12

Source	Link
securitytracker	www.securitytracker.com/id
punbb	www.punbb.org/changelogs/1.2.13_to_1.2.14.txt
wargan	www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities
securityfocus	www.securityfocus.com/archive/1/450055/100/0/threaded
osvdb	www.osvdb.org/30133
securityreason	www.securityreason.com/securityalert/1824
vupen	www.vupen.com/english/advisories/2006/4256

23 Apr 2026 00:35Current

7.9High risk

Vulners AI Score7.9

CVSS 25.1

EPSS0.01042