Unscored severity · published Feb 23, 2006
CVE-2006-0851
SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a…
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IL
Ilchclan · Ilch.de
0.0.1; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0851
Exploit
http://secunia.com/advisories/18951
www.osvdb.org
http://www.osvdb.org/23369
www.securityfocus.com
http://www.securityfocus.com/bid/16735
www.vupen.com
http://www.vupen.com/english/advisories/2006/0672
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/24829
www.exploit-db.com
https://www.exploit-db.com/exploits/1516
More from Ilchclan
–
CVE-2006-0850
SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the login_name parameter