Vulnerabilities > CVE-2006-1926 - SQL Injection vulnerability in ThWboard Showtopic.PHP

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
thwboard
exploit available

Summary

SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the pagenum parameter.

Exploit-Db

descriptionThWboard 2.8 Showtopic.PHP SQL Injection Vulnerability. CVE-2006-1926. Webapps exploit for php platform
idEDB-ID:27687
last seen2016-02-03
modified2006-04-19
published2006-04-19
reporterQex
sourcehttps://www.exploit-db.com/download/27687/
titleThWboard 2.8 Showtopic.PHP SQL Injection Vulnerability