Security Advisory

CVE-2006-2034

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-04-26 00:00:00

Last updated 2024-08-07 17:35:31

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php.

← Browse all CVEs View on cve.org ↗