CVE-2006-0065

ALTO 7.5CVE-2006-0065 · Published 03/01/2006 · updated 16/06/2026

In breve

CVE-2006-0065 è una vulnerabilità ALTO (CVSS 7.5) che riguarda vego web forum (vego).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
vego web forum vego	`≤ 1.26`	No fix yet

Description

SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index.php.

References

evuln.com/vulns/1/summary.html · Vendor Advisory
secunia.com/advisories/18273 · Vendor Advisory
securityreason.com/securityalert/315
osvdb.org/22140
securityfocus.com/archive/1/420661/100/0/threaded
securityfocus.com/bid/16107
vupen.com/english/advisories/2006/0003

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free