ID CVE-2006-0545
Summary SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
    cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 16520
bugtraq 20060325 UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection
misc http://www.cyberlords.net/advisories/cl_ubb.txt
osvdb 22808
sectrack 1015549
xf ubbthreads-showflat-sql-injection(24381)
Last major update 20-07-2017 - 01:29
Published 04-02-2006 - 02:02
Last modified 20-07-2017 - 01:29
Back to Top