CVE-2006-3238

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-27 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php.

Affected products

Vbzoom: through 1.00

References

http://secunia.com/advisories/20701/
http://securityreason.com/securityalert/1149
http://www.securityfocus.com/archive/1/437651/100/100/threaded
http://www.securityfocus.com/archive/1/437658/100/100/threaded
http://www.securityfocus.com/bid/18497
http://www.vupen.com/english/advisories/2006/2468
https://exchange.xforce.ibmcloud.com/vulnerabilities/27294
http://secunia.com/advisories/20701/
http://securityreason.com/securityalert/1149
http://www.securityfocus.com/archive/1/437651/100/100/threaded
http://www.securityfocus.com/archive/1/437658/100/100/threaded
http://www.securityfocus.com/bid/18497

Get alerted when CVE-2006-3238 or the next vulnerability affects your stack