Unscored CVE-2006-3239 EUVD-2006-3236GHSA-7594-h8gm-cmqx

SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Use…

Published Jun 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.

References

vbzoom-message-sql-injection(27295) vdb-entry
20060619 VBZooM <<--V1.11 "message.php" SQL injection mailing-list
18497 vdb-entry
1148 third-party-advisory