CVE-2006-2697

Easy-content Forums - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ajann · webappsasp

https://www.exploit-db.com/exploits/1834

View Code ZIP pw:eip

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/435140/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/26804

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/997

Scores

EPSS 0.0085

EPSS Percentile 75.0%

Details

Status published

Products (1)

easy-content_forums/easy-content_forums 1.0

Published May 31, 2006

Tracked Since Feb 18, 2026