CVE-2006-2034: SQL Injection
Published Apr 26, 2006
·Updated
SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php.
Affected Software
1 affected component
FlexBB FlexBB=0.5.5
Event History
Apr 26, 2006
CVE Published
12:06 AM
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2034?
CVE-2006-2034 is considered to have a high severity due to the potential for remote SQL execution.
2
How do I fix CVE-2006-2034?
To fix CVE-2006-2034, validate and sanitize the id parameter in the showprofile page to prevent SQL injection.
3
What types of attacks can CVE-2006-2034 facilitate?
CVE-2006-2034 can facilitate SQL injection attacks allowing attackers to access sensitive data such as usernames and passwords.
4
Which software versions are affected by CVE-2006-2034?
CVE-2006-2034 specifically affects FlexBB version 0.5.5.
5
Is there a patch for CVE-2006-2034?
A specific patch for CVE-2006-2034 is not provided; however, updating to a newer, secure version is recommended.