CVE-2006-3096

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-19 · updated 2026-09-23

Description

Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and (2) topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently removed after CVE analysis. As of 20060619, CVE is attempting to determine the cause of the removal.

Affected products

Ipostmx 2005: through 2.0

References

http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/27144
http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/27144

Get alerted when CVE-2006-3096 or the next vulnerability affects your stack