Unscored CVE-2006-2486 EUVD-2006-2486GHSA-fxqm-mwpx-gvx7

SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the us…

Published May 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.

References

yapbb-find-sql-injection(26456) vdb-entry
20060515 YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability mailing-list
923 third-party-advisory
17988 vdb-entry