CVE-2006-2034

CVE-2006-2034 describes an SQL injection in FlexBB 0.5.5, in function/showprofile.php, exploitable via the id parameter on index.php. The underlying issue is a vulnerable input handling leading to arbitrary SQL execution, with the documented impact of viewing all usernames and passwords. Connecte...