CVE-2006-2090

MySmartBB 1.1.x - SQL Injection via misc.php id or username Parameter

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/432095/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26088
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17707
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/807

Scores

EPSS 0.0129
EPSS Percentile 67.5%

Details

CWE
CWE-89
Status published
Products (2)
mysmartbb/mysmartbb 1.1.2
mysmartbb/mysmartbb 1.1.3
Published Apr 29, 2006
Tracked Since Feb 18, 2026