CVE-2006-2504

Published: May 22, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search and (2) cate parameters to (a) list.asp, and the (3) id and cate parameters to (b) admin_ok.asp.

Affected (1)

Products: Azboard: Azboard

Azboard

1 product

Azboard

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Azboard Azboard	version ≤ 1.0

References (18)

http://secunia.com/advisories/20112

Source: cve@mitre.org

http://securityreason.com/securityalert/928

Source: cve@mitre.org

http://user.chol.com/~jyj9782/sec/azboard_advisory.txt

Source: cve@mitre.org

Exploit

http://www.osvdb.org/25527

Source: cve@mitre.org

http://www.osvdb.org/25528

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434010/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17990

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1827

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26495

Source: cve@mitre.org

http://secunia.com/advisories/20112