CVE-2006-2805: SQL Injection
Published Jun 3, 2006
·Updated
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter.
Affected Software
1 affected component
Jelsoft vBulletin=3.0.10
Event History
Jun 3, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2805?
The severity of CVE-2006-2805 is considered high due to its potential for executing arbitrary SQL commands.
2
How do I fix CVE-2006-2805?
To fix CVE-2006-2805, upgrade VBulletin to a version that is not affected by this SQL injection vulnerability.
3
What are the potential impacts of CVE-2006-2805?
The potential impacts of CVE-2006-2805 include unauthorized access to the database and potential data manipulation.
4
Who is affected by CVE-2006-2805?
Users of VBulletin version 3.0.10 are affected by CVE-2006-2805.
5
How does CVE-2006-2805 exploit work?
CVE-2006-2805 exploits the vulnerability by manipulating the featureid parameter to execute malicious SQL queries.