CVE-2006-1958

CVE-2006-1958 involves multiple SQL injection vulnerabilities in WWWThreads RC 3. The two attack vectors are (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php, allowing remote attackers to execute arbitrary SQL commands. The CVE description indicates ...

CVE-2006-1958

Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...