7.5
CVSSv2

CVE-2006-1327

Published: 21/03/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote malicious users to execute arbitrary SQL commands via the mail parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

softbb softbb 0.1

Exploits

#!/usr/bin/env python # LOTFREE TEAM 03/2006 # lotfreenext-touchcom/ # membreslycosfr/lotfree/sploits/LOTF-SoftBBpy # # Vulnerability info # Product : SoftBB # Version : 01 # # The field 'mail' in regphp is used directly in a SQL query : # $sql = 'SELECT pseudo,mail FROM '$prefixtable'membres WHERE pseudo = "'add_gpc($pseudo ...
SoftBB version 013 suffers from a remote SQL injection vulnerability ...