CVE-2006-2697

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp.

Affected products

Easy-Content Forums: 1.0

References

http://securityreason.com/securityalert/997
http://www.securityfocus.com/archive/1/435140/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/26804
http://securityreason.com/securityalert/997
http://www.securityfocus.com/archive/1/435140/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/26804

Get alerted when CVE-2006-2697 or the next vulnerability affects your stack