CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-2867

HIGH
7.5
CVSS Severity Score
EPSS Score0.1300%
EPSS Percentile20.94th
Published2006年6月6日
Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Affected Platforms (CPE)

📦
Coolforum

Coolforum

<= 0.8.3_beta

References & Advisories

🔗 http://mgsdl.free.fr/advisories/coolforum083ba.txt
🔗 http://securityreason.com/securityalert/1052
🔗 http://securitytracker.com/id?1016218
🔗 http://www.securityfocus.com/archive/1/435862/100/0/threaded
🔗 http://www.securityfocus.com/bid/18268
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/26920
🔗 http://mgsdl.free.fr/advisories/coolforum083ba.txt
🔗 http://securityreason.com/securityalert/1052

関連する脆弱性情報

CVE-2005-085510.0

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to (1) entete.ph...

CVE-2005-08567.5

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) v...

CVE-2005-08587.5

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (...

CVE-2002-15155.0

Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot ...