VULNERABILITY INTELLIGENCE
CVE-2006-1423
CVSS score5 NONE
EPSS probability0.96%
CISA KEVNot currently listed
Published2006-03-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.
Weakness classification
- nvd@nist.gov: CWE-89