Vulnerabilities > CVE-2006-7088 - Unspecified vulnerability in Simple PHP Forum Simple PHP Forum 0.1/0.2/0.3

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
simple-php-forum
NVD
Published: 2007-03-02
Updated: 2024-11-21

Summary

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) logon_user.php and (2) update_profile.php.

Vulnerable Configurations

Part Description Count
Application
Simple_Php_Forum
3

References