CVE-2006-6828

CVE-2006-6828 describes multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier. The affected components are (1) default.asp (grup parameter) and (2) admin.asp (id parameter) or (3) admin.asp, allowing remote attackers to execute arbitrary SQL commands. The default.asp/grup vector i...