• info
• discussion
• exploit
• solution
• references

UBB.threads CVE-2006-1423 SQL-Injection Vulnerability

UBB.threads is prone to a sql-injection vulnerability. SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.