CVE-2006-6828: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the grup parameter in admin.asp, or the id parameter in 2 default.asp or 3 admin.asp. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6794: Undefined Security Weakness

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the grup parameter...