CVE-2006-0669

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-13 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments

Affected products

Gasoft Gas Forum Light: all versions

References

http://securitytracker.com/id?1015600
http://www.attrition.org/pipermail/vim/2006-February/000561.html
http://www.osvdb.org/23509
http://www.securityfocus.com/bid/16563
https://exchange.xforce.ibmcloud.com/vulnerabilities/24616
http://securitytracker.com/id?1015600
http://www.attrition.org/pipermail/vim/2006-February/000561.html
http://www.osvdb.org/23509
http://www.securityfocus.com/bid/16563
https://exchange.xforce.ibmcloud.com/vulnerabilities/24616

Get alerted when CVE-2006-0669 or the next vulnerability affects your stack