CVE-2006-6038 SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| powie pforum | <= 1.29a | No fix listed |
References
- 22964 third-party-advisory vendor-advisory
- 21144 exploit vdb-entry
- ADV-2006-4607 vdb-entry vendor-advisory
- powies-editpoll-sql-injection(30359) vdb-entry
- 2797 exploit