CVE-2006-1638

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-06 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.

Affected products

Aweb Labs Awebbb: 1.2

References

http://evuln.com/vulns/117/summary.html
http://secunia.com/advisories/19486
http://www.osvdb.org/24340
http://www.osvdb.org/24341
http://www.osvdb.org/24342
http://www.osvdb.org/24343
http://www.osvdb.org/24344
http://www.osvdb.org/24345
http://www.osvdb.org/24346
http://www.osvdb.org/24347
http://www.osvdb.org/24348
http://www.osvdb.org/24349

Get alerted when CVE-2006-1638 or the next vulnerability affects your stack