7.5
CVSSv2

CVE-2006-2067

Published: 27/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and previous versions, allows remote malicious users to execute arbitrary SQL commands via the userid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

mkportal mkportal 1.1

Exploits

source: wwwsecurityfocuscom/bid/17651/info MKPortal is prone to multiple input-validation vulnerabilities The issues include cross-site scripting and SQL-injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successfully exploiting these vulnerabilities could allow an ...