Unscored CVE-2006-3275 EUVD-2006-3272GHSA-w82v-5r3f-7xwr

SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encode…

Published Jun 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action.

References

ADV-2006-2504 vdb-entry
20060623 NDSD-06-001 mailing-list
yabb-profile-sql-injection(27331) vdb-entry
20780 third-party-advisory
18625 vdb-entry