CVE-2006-4632

SoftBB 0.1 - SQL Injection

Title source: llm

Description

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by DarkFig · perlwebappsphp

https://www.exploit-db.com/exploits/2300

View Code ZIP pw:eip

References (10)

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2300

[Third Party Advisory, VDB Entry] http://www.osvdb.org/28578

[Third Party Advisory, VDB Entry] http://www.osvdb.org/28577

[Third Party Advisory] http://secunia.com/advisories/21761

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/3478

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1016785

[Third Party Advisory] http://securityreason.com/securityalert/1521

[Various Sources] http://acid-root.new.fr/advisories/10060904.txt

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/28747

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/445087/100/0/threaded

Scores

EPSS 0.0360

EPSS Percentile 87.8%

Details

Status published

Products (1)

softbb/softbb < 0.1

Published Sep 08, 2006

Tracked Since Feb 18, 2026