CVE-2006-5736

Published: Nov 6, 2006Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.

Affected (29)

Products: Punbb: Punbb

Punbb

1 product

Punbb

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Punbb Punbb	Up to 1.2.13
Punbb Punbb	Version 1.0.1
Punbb Punbb	Version 1.0
Punbb Punbb	Version 1.0_alpha
Punbb Punbb	Version 1.0_beta1
Punbb Punbb	Version 1.0_beta1a
Punbb Punbb	Version 1.0_beta2
Punbb Punbb	Version 1.0_beta3
Punbb Punbb	Version 1.0_rc1
Punbb Punbb	Version 1.0_rc2
Punbb Punbb	Version 1.1.1
Punbb Punbb	Version 1.1.2
Punbb Punbb	Version 1.1.3
Punbb Punbb	Version 1.1.4
Punbb Punbb	Version 1.1.5
Punbb Punbb	Version 1.1
Punbb Punbb	Version 1.2.10
Punbb Punbb	Version 1.2.11
Punbb Punbb	Version 1.2.12
Punbb Punbb	Version 1.2.1
Punbb Punbb	Version 1.2.2
Punbb Punbb	Version 1.2.3
Punbb Punbb	Version 1.2.4
Punbb Punbb	Version 1.2.5
Punbb Punbb	Version 1.2.6
Punbb Punbb	Version 1.2.7
Punbb Punbb	Version 1.2.8
Punbb Punbb	Version 1.2.9
Punbb Punbb	Version 1.2