Unscored CVE-2006-1423 EUVD-2006-1427GHSA-mcrm-xjc2-86j5

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute ar…

Published Mar 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.

References

20060325 UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection mailing-list
628 third-party-advisory