CVE-2006-0962

Description

SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://www.securityfocus.com/bid/16930 ↗
• http://secunia.com/advisories/19084 ↗
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25019 ↗
• http://www.vupen.com/english/advisories/2006/0799 ↗
• https://www.exploit-db.com/exploits/1543 ↗