Unscored CVE-2006-2822 EUVD-2006-2819GHSA-w3gr-mc6q-x9wf

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execu…

Published Jun 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

References

1026 third-party-advisory
20060601 CA Forum Remote SQL Injection mailing-list
1016212 vdb-entry
http://colander.altervista.org/advisory/CAForum.txt
20411 third-party-advisory
ADV-2006-2117 vdb-entry