CVE-2006-4367

Published: Aug 26, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter.

Affected (1)

Products: All Topics: All Topics Hack

All Topics

1 product

All Topics Hack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
All Topics All Topics Hack	version ≤ 1.5.0

References (6)

http://www.securityfocus.com/bid/19682

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/28538

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2248

Source: cve@mitre.org

http://www.securityfocus.com/bid/19682

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/28538

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/2248

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.