CVE-2006-2067

The CVE-2006-2067 entry documents a SQL injection vulnerability in MKPortal 1.1 when used with vBulletin 3.5.4 and earlier. The flaw affects vb_board_functions.php, where the userid parameter can be exploited by remote attackers to execute arbitrary SQL commands. No specific exploit details are p...