CVE-2006-5500

CVE-2006-5500 affects XchangeBoard 1.70 and earlier. The checkUser function in inc/DBInterface.php is vulnerable to SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to inject via the (1) userNick or (2) password parameters. Connected documents corroborate this as the vul...

CVE-2006-5500

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 userNick or 2 password parameters. NOTE: the provenance of this information...