Vulnerabilities > O2Php COM

DATE CVE VULNERABILITY TITLE RISK
2006-12-04 CVE-2006-6280 SQL-Injection vulnerability in Oxygen
SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572.
network
low complexity
o2php-com
7.5
2006-04-01 CVE-2006-1572 SQL Injection vulnerability in O2PHP Oxygen Post.PHP
SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action.
network
low complexity
o2php-com
5.0