CVE-2006-2835

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-06-06 · updated 2026-06-16

Description

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php.

Affected products

Arabless Saphplesson: 2.0

References

http://securityreason.com/securityalert/1047
http://www.securityfocus.com/archive/1/435202/100/0/threaded
http://www.securityfocus.com/archive/1/440120
http://www.securityfocus.com/archive/1/472798/100/0/threaded
http://www.securityfocus.com/bid/18117
http://www.securityfocus.com/bid/18934
https://exchange.xforce.ibmcloud.com/vulnerabilities/26757
http://securityreason.com/securityalert/1047
http://www.securityfocus.com/archive/1/435202/100/0/threaded
http://www.securityfocus.com/archive/1/440120
http://www.securityfocus.com/archive/1/472798/100/0/threaded
http://www.securityfocus.com/bid/18117

Get alerted when CVE-2006-2835 or the next vulnerability affects your stack