CVE-2006-4632

SoftBB 0.1 - SQL Injection

Title source: llm

Description

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by DarkFig · perlwebappsphp

https://www.exploit-db.com/exploits/2300

View Code ZIP pw:eip

References (10)

[Third Party Advisory, VDB Entry] http://www.osvdb.org/28577

[Third Party Advisory, VDB Entry] http://www.osvdb.org/28578

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28747

[Various Sources] http://acid-root.new.fr/advisories/10060904.txt

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/445087/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2300

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1016785

[Third Party Advisory] http://secunia.com/advisories/21761

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3478

[Third Party Advisory] http://securityreason.com/securityalert/1521

Scores

EPSS 0.0360

EPSS Percentile 87.6%

Classification

Status draft

Affected Products (1)

softbb/softbb < 0.1

Timeline

Published Sep 08, 2006

Tracked Since Feb 18, 2026