CVE-2006-0851

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL via the pid parameter when creating a newpost. Root cause: unsanitized input in the pid field. Impact: partial confidentiality/integrity/availability. Affected: ilchClan ...

CVE-2006-0850

The CVE concerns ilchClan (CMS) before version 1.05g, specifically the login routine at include/includes/user/login.php. The vulnerability is an SQL injection in the login_name parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: login.php handling in ilchCl...