CVE-2006-5500: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 userNick or 2 password parameters. NOTE: the provenance of this information...