CVE-2006-3309

EPSS 2.5%

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1957unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20857 https://exchange.xforce.ibmcloud.com/vulnerabilities/27401 https://www.exploit-db.com/exploits/1957 http://www.osvdb.org/26870 http://www.securityfocus.com/bid/18688 http://www.vupen.com/english/advisories/2006/2560