CVE-2006-4564: SQL Injection

Published Sep 6, 2006

Updated

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter.

Affected Software

1 affected component

SimpleMachines Smf=1.1-rc3

Event History

Sep 6, 2006

CVE Published

01:04 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4564?

CVE-2006-4564 is considered a high severity SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2006-4564?

To fix CVE-2006-4564, it is recommended to upgrade to a patched version of Simple Machines Forum that addresses this SQL injection vulnerability.

What software is affected by CVE-2006-4564?

CVE-2006-4564 specifically affects Simple Machines Forum version 1.1 RC3.

What can attackers achieve by exploiting CVE-2006-4564?

By exploiting CVE-2006-4564, attackers can manipulate database queries, potentially leading to data leakage or corruption.

Is CVE-2006-4564 an input validation issue?

Yes, CVE-2006-4564 is an input validation issue where the application fails to properly sanitize user input in the cur_cat parameter.