CVE-2006-1572

CVE-2006-1572 is an SQL injection vulnerability in Oxygen 1.1.3, exploitable via the fid parameter in a newthread action of post.php. The affected component is Oxygen’s post.php handler; the root cause is unsafely handled user input leading to SQL command execution. This CVE entry has corroborati...

CVE-2006-6280

The CVE-2006-6280 entry describes an SQL injection vulnerability in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier. The affected component is viewthread.php, where the pid parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. This vector is a different vector...