7.5
CVSSv2

CVE-2006-1708

Published: 11/04/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in member.php in Clansys 1.1 allows remote malicious users to execute arbitrary SQL commands via the showid parameter in the member page to index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

clansys clansys 1.1

Exploits

<?php /* |---==============================================================---| | /\¯\__ /\¯\ | | ____ ___ __ \ \ _\ ___\ \ \___ __ ___ | | / __\ / _ \ / __ \ \ \ \/ / ___\ \ _ \ / __ \/\ __\ | | /\__, \/\ \/\ \/\ \_\ \_\ \ \_ ...