CVE-2006-3078

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-19 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID parameter in board.php and (2) viewcatmod parameter in main.php.

Affected products

Apboard: through 2.2_r3

References

http://secunia.com/advisories/20682
http://securityreason.com/securityalert/1117
http://www.osvdb.org/26582
http://www.osvdb.org/26583
http://www.securityfocus.com/archive/1/437271/100/0/threaded
http://www.securityfocus.com/bid/18447
http://www.vupen.com/english/advisories/2006/2401
https://exchange.xforce.ibmcloud.com/vulnerabilities/27163
http://secunia.com/advisories/20682
http://securityreason.com/securityalert/1117
http://www.osvdb.org/26582
http://www.osvdb.org/26583

Get alerted when CVE-2006-3078 or the next vulnerability affects your stack