CVE-2006-0669
GA's Forum Light - SQL Injection via Forum and Pages Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-0669. PoCs published by Dj_Eyes.
AI-analyzed exploit summary The exploit demonstrates SQL injection in GA's Forum Light via unsanitized input in the 'Forum' parameter. The provided URLs show basic SQLi payloads that could manipulate queries.
Description
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments
Exploits (1)
The exploit demonstrates SQL injection in GA's Forum Light via unsanitized input in the 'Forum' parameter. The provided URLs show basic SQLi payloads that could manipulate queries.