Vulnerability Details CVE-2006-4564
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the cur_cat parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v2 Score 5.1
References
- http://archives.neohapsis.com/archives/bugtraq/2006-09/0009.html
- http://secunia.com/advisories/21740
- http://securityreason.com/securityalert/1506
- http://www.vupen.com/english/advisories/2006/3435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28716
- http://archives.neohapsis.com/archives/bugtraq/2006-09/0009.html
- http://secunia.com/advisories/21740
- http://securityreason.com/securityalert/1506
- http://www.vupen.com/english/advisories/2006/3435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28716
Products affected by CVE-2006-4564
-
cpe:2.3:a:simplemachines:smf:1.1