CVE-2006-0669 | BDVDB-2026-15111 Detail

Description#

Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/16563
https://exchange.xforce.ibmcloud.com/vulnerabilities/24616
http://securitytracker.com/id?1015600
http://www.attrition.org/pipermail/vim/2006-February/000561.html
http://www.osvdb.org/23509

Exploit#

No public exploit known

History#

Version 12006-02-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.