CVE-2006-1805

CVE-2006-1805 affects PowerClan 1.14 and its member.php handling. The vulnerability is a SQL injection in the memberid parameter that allows remote attackers to execute arbitrary SQL commands, as described in the CVE entry and corroborated by multiple sources (NVD/PRION/CVEList). The available do...

CVE-2009-0707

CVE-2009-0707 is a SQL injection vulnerability in PowerClan 1.14a, specifically in admin/index.php where the loginemail parameter (login field) can be used to execute arbitrary SQL commands. The available connected documents confirm the affected component (admin/index.php), the software/version (...

CVE-2006-6715

PowerClan 1.14a and earlier is affected by a PHP remote file inclusion in footer.inc.php. The root cause is a user-controllable URL passed via the settings[footer] parameter when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code. This vulnerability can enable co...