CVE-2006-0545

UBB.threads 6.3 - SQL Injection via showflat.php Number Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0545. PoCs published by k-otik.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in UBB.Threads 6.3 via the 'Number' parameter in showflat.php. The PoC uses a UNION-based SQLi to extract data, leveraging unsanitized user input.

Description

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by k-otik · textwebappsphp

https://www.exploit-db.com/exploits/27164

View Code ZIP pw:eip

This exploit demonstrates an SQL injection vulnerability in UBB.Threads 6.3 via the 'Number' parameter in showflat.php. The PoC uses a UNION-based SQLi to extract data, leveraging unsanitized user input.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: UBB.Threads 6.3

No auth needed

Prerequisites: Access to the vulnerable UBB.Threads instance

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6

Core References

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/22808

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/16520

Exploit vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015549

Various Sources x_refsource_misc

http://www.cyberlords.net/advisories/cl_ubb.txt

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/24381

Scores

EPSS 0.0125

EPSS Percentile 65.7%

Details

Status published

Products (11)

ubbcentral/ubb.threads 6.0

ubbcentral/ubb.threads 6.0.1

ubbcentral/ubb.threads 6.0.2

ubbcentral/ubb.threads 6.0.3

ubbcentral/ubb.threads 6.1

ubbcentral/ubb.threads 6.1.1

ubbcentral/ubb.threads 6.2

ubbcentral/ubb.threads 6.2.1

ubbcentral/ubb.threads 6.2.2

ubbcentral/ubb.threads 6.2.3

... and 1 more

Published Feb 04, 2006

Tracked Since Feb 18, 2026