CVE-2006-2835

Published: Jun 6, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php.

Affected (1)

Products: Arabless: Saphplesson

Arabless

1 product

Saphplesson

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Arabless Saphplesson	Version 2.0

References (14)

http://securityreason.com/securityalert/1047

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/435202/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440120

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/472798/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18117

Source: cve@mitre.org

http://www.securityfocus.com/bid/18934

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26757

Source: cve@mitre.org

http://securityreason.com/securityalert/1047