CVE-2006-1000

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-06 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.

Affected products

G2Soft Pentacle In-Out Board: 6.03

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html
http://secunia.com/advisories/19024
http://securitytracker.com/id?1015682
http://www.nukedx.com/?viewdoc=13
http://www.nukedx.com/?viewdoc=14
http://www.securityfocus.com/archive/1/426074/100/0/threaded
http://www.securityfocus.com/archive/1/426075/100/0/threaded
http://www.securityfocus.com/bid/16818
http://www.vupen.com/english/advisories/2006/0749
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html

Get alerted when CVE-2006-1000 or the next vulnerability affects your stack