CVE-2006-6038

SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6038

CVE-2006-6038 affects Powie’s PHP Forum (pForum) prior to and including version 1.29a, where SQL injection is triggered in editpoll.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL statements; impact is partial confidentiality/integrity/availability per...