Unscored severity · published Apr 29, 2006
CVE-2006-2090
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mysmartbb · Mysmartbb
1.1.2; 1.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2090
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2090
securityreason.com
http://securityreason.com/securityalert/807
www.securityfocus.com
http://www.securityfocus.com/archive/1/432095/100/0/threaded
Exploit
http://www.securityfocus.com/bid/17707
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/26088
More from Mysmartbb
–
CVE-2006-2089
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) username…