CVE-2006-1978

The vulnerability CVE-2006-1978 affects FlexBB 0.5.5 and earlier, due to an SQL injection in inc/start.php. An attacker can manipulate the flexbb_username cookie to execute arbitrary SQL commands on the backend. This is a remote attack with no authentication required, and the impact includes pote...

CVE-2006-1978: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbbusername COOKIE parameter...