PT-2006-3434 · Yapbb · Yapbb

Geinblues + 2 · Published 2006-05-19 · Updated 2018-10-18 · CVE-2006-2486

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions YapBB versions 1.2 Beta2 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands via the userID parameter in the "find.php" file.

Recommendations For YapBB versions 1.2 Beta2 and earlier, avoid using the userID parameter in the affected find.php file until the issue is resolved.

Fix

Related Identifiers

CVE-2006-2486

Affected Products

Yapbb

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-2486 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26456 · Note
• http://securityfocus.com/bid/17988 · Note
• http://securityfocus.com/archive/1/434039/100/0/threaded · Note
• http://securityreason.com/securityalert/923 · Note