CVE-2006-3307

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
29/06/2006
Last modified:
03/04/2025

Description

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters in the php/comment.php and (2) the getpartialmatches method in php/aolbonics.php.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:zoid_technologies:project_eros_bbsengine:2006-02-23:*:*:*:*:*:*:*