7.5
CVSSv2

CVE-2006-2822

Published: 05/06/2006 Updated: 18/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote malicious users to execute arbitrary SQL commands via the password parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

xfairguy codeavalanche freeforum 1.0