Description
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962.
References
- 1948 third-party-advisory
- 20060618 vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link mailing-list
- http://www.acid-root.new.fr/advisories/vubb021b.txt
- vubb-register-sql-injection(27297) vdb-entry
- ADV-2006-2458 vdb-entry