CVE-2006-1766

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-13 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.php, (3) menuid parameter in (b) plugin.php and (c) forumthread.php, and (4) msgid parameter in forumthread.php.

Affected products

Papoo: through 3_beta1; 2.1.2, 2.1.4, 2.1.5

References

http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/25728
http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/25728

Get alerted when CVE-2006-1766 or the next vulnerability affects your stack