CVE-2006-5635

Published: Nov 1, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.

Affected (13)

Products: Web Wiz Forums: Web Wiz Forums

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Web Wiz Forums Web Wiz Forums	Version 6.34
Web Wiz Forums Web Wiz Forums	Version 7.0.1
Web Wiz Forums Web Wiz Forums	Version 7.0
Web Wiz Forums Web Wiz Forums	Version 7.0_beta1
Web Wiz Forums Web Wiz Forums	Version 7.51
Web Wiz Forums Web Wiz Forums	Version 7.5
Web Wiz Forums Web Wiz Forums	Version 7.7a
Web Wiz Forums Web Wiz Forums	Version 7.7b
Web Wiz Forums Web Wiz Forums	Version 7.8
Web Wiz Forums Web Wiz Forums	Version 7.91
Web Wiz Forums Web Wiz Forums	Version 7.9
Web Wiz Forums Web Wiz Forums	Version 8.04
Web Wiz Forums Web Wiz Forums	Version 8.0_alpha

References (8)

http://securityreason.com/securityalert/1801

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/450034/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20778

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29898

Source: cve@mitre.org

http://securityreason.com/securityalert/1801

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/450034/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20778

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29898

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.