PT-2006-1725 · Ga · Ga'S Forum Light

Dj_Eyes · Published 2006-02-13 · Updated 2024-08-07 · CVE-2006-0669

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GA's Forum Light (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via the Forum and pages parameters in the archive.asp file. However, the vendor has disputed this issue, stating that GA Forum Light does not use an SQL database. Research suggests that the problem could be due to a vbscript parsing error based on invalid arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-0669

Affected Products

Ga'S Forum Light

References · 8

• 🔥 http://securitytracker.com/id?1015600 · Exploit
• 🔥 https://exploit-db.com/exploits/27174 · Exploit
• 🔥 http://securityfocus.com/bid/16563 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0669 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24616 · Note
• https://t.me/cvenotify/89753 · Telegram Post
• http://attrition.org/pipermail/vim/2006-February/000561.html · Note
• http://osvdb.org/23509 · Note