CVE-2006-3078

CVE-2006-3078 describes multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier . Attackers can remotely execute arbitrary SQL commands via the PHPSESSID parameter in board.php and the viewcatmod parameter in main.php . The connected documents confirm these vectors and the affected s...