CVE-2006-2050

CVE-2006-2050 affects DCScripts DCForumLite 3.0 via SQL injection in dcboard.cgi (parameter az). Root cause: improper input handling allowing arbitrary SQL execution by remote attackers. Impact: potential data exposure or modification as described in the original vulnerability note. Connected rec...

CVE-2006-2049

CVE-2006-2049 is a cross-site scripting (XSS) vulnerability in DCScripts DCForumLite 3.0, specifically in the dcboard.cgi handler where the az parameter can be crafted to inject arbitrary web script or HTML. The vulnerability enables remote attackers to inject scripts in victims’ browsers, with t...