CVE-2006-7088

Published: Mar 2, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) logon_user.php and (2) update_profile.php.

Affected (3)

Products: Simple Php Forum: Simple Php Forum

Simple Php Forum

1 product

Simple Php Forum

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Simple Php Forum Simple Php Forum	Version 0.1
Simple Php Forum Simple Php Forum	Version 0.2
Simple Php Forum Simple Php Forum	Version 0.3

References (6)

http://sourceforge.net/project/shownotes.php?release_id=462654

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/4496

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30252

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=462654

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/4496

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30252

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.