CVE-2006-1766 in Papoo信息

摘要

由 VulDB • 2026-06-10

Papoo 2.1.5、3 beta1及更早版本中存在多个SQL注入漏洞，远程攻击者可通过(a)index.php中的(1)getlang和(2)reporeid参数、(b)plugin.php和(c)forumthread.php中的(3)menuid参数以及forumthread.php中的(4)msgid参数执行任意SQL命令。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2006-04-12

披露

2006-04-13

管理

已接受

条目

VDB-29632

CPE

准备好

CWE

CWE-89 (已确认)

CVSS

6.5 (VulDB)

EPSS

0.01009

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2006-1766
NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1766
CVE Details	https://www.cvedetails.com/cve/CVE-2006-1766/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!