Vulnerability Details CVE-2006-0545
SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html
- http://securitytracker.com/id?1015549
- http://www.cyberlords.net/advisories/cl_ubb.txt
- http://www.osvdb.org/22808
- http://www.securityfocus.com/bid/16520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24381
- http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html
- http://securitytracker.com/id?1015549
- http://www.cyberlords.net/advisories/cl_ubb.txt
- http://www.osvdb.org/22808
- http://www.securityfocus.com/bid/16520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24381
Products affected by CVE-2006-0545
-
cpe:2.3:a:ubbcentral:ubb.threads:6.0
-
cpe:2.3:a:ubbcentral:ubb.threads:6.0.1
-
cpe:2.3:a:ubbcentral:ubb.threads:6.0.2
-
cpe:2.3:a:ubbcentral:ubb.threads:6.0.3
-
cpe:2.3:a:ubbcentral:ubb.threads:6.1
-
cpe:2.3:a:ubbcentral:ubb.threads:6.1.1
-
cpe:2.3:a:ubbcentral:ubb.threads:6.2
-
cpe:2.3:a:ubbcentral:ubb.threads:6.2.1
-
cpe:2.3:a:ubbcentral:ubb.threads:6.2.2
-
cpe:2.3:a:ubbcentral:ubb.threads:6.2.3
-
cpe:2.3:a:ubbcentral:ubb.threads:6.3