CVE-2006-4632

Published: Sep 8, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.

Affected (1)

Products: Softbb: Softbb

Softbb

1 product

Softbb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Softbb Softbb	Up to 0.1

References (20)

http://acid-root.new.fr/advisories/10060904.txt

Source: cve@mitre.org

http://secunia.com/advisories/21761

Source: cve@mitre.org

http://securityreason.com/securityalert/1521

Source: cve@mitre.org

http://securitytracker.com/id?1016785

Source: cve@mitre.org

http://www.osvdb.org/28577

Source: cve@mitre.org

http://www.osvdb.org/28578

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/445087/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3478

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28747

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2300

Source: cve@mitre.org

http://acid-root.new.fr/advisories/10060904.txt