Vulnerabilities > CVE-2006-1327 - SQL Injection vulnerability in Softbb 0.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
softbb
exploit available
NVD
Published: 2006-03-21
Updated: 2017-10-19

Summary

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter.

Vulnerable Configurations

Part Description Count
Application
Softbb
1

Exploit-Db

descriptionSoftBB 0.1 (mail) Remote Blind SQL Injection Exploit. CVE-2006-1327. Webapps exploit for php platform
fileexploits/php/webapps/1594.py
idEDB-ID:1594
last seen2016-01-31
modified2006-03-19
platformphp
port
published2006-03-19
reporterLOTFREE
sourcehttps://www.exploit-db.com/download/1594/
titleSoftBB 0.1 mail Remote Blind SQL Injection Exploit
typewebapps

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/129888/softbb-sql.txt
idPACKETSTORM:129888
last seen2016-12-05
published2015-01-11
reporterJing Wang
sourcehttps://packetstormsecurity.com/files/129888/SoftBB-0.1.3-SQL-Injection.html
titleSoftBB 0.1.3 SQL Injection

References