{"api_version":"1","generated_at":"2026-07-23T08:16:26+00:00","cve":"CVE-2006-0123","urls":{"html":"https://cve.report/CVE-2006-0123","api":"https://cve.report/api/cve/CVE-2006-0123.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0123","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0123"},"summary":{"title":"CVE-2006-0123","description":"Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-01-09 11:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/16157","name":"http://www.securityfocus.com/bid/16157","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"ADN Forum Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/22241","name":"http://www.osvdb.org/22241","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://evuln.com/vulns/15/summary.html","name":"http://evuln.com/vulns/15/summary.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"eVuln.com - ADNForum Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/420990/100/0/threaded","name":"http://www.securityfocus.com/archive/1/420990/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18300","name":"http://secunia.com/advisories/18300","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"ADN Forum Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/22240","name":"http://www.osvdb.org/22240","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015445","name":"http://securitytracker.com/id?1015445","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - ADN Forum Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/0077","name":"http://www.vupen.com/english/advisories/2006/0077","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0123","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0123","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"123","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adn_forum","cpe5":"adn_forum","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"123","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"adn_forum","cpe5":"adn_forum","cpe6":"1.0b","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:25:33.619Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1015445","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015445"},{"name":"22240","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/22240"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://evuln.com/vulns/15/summary.html"},{"name":"22241","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/22241"},{"name":"ADV-2006-0077","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/0077"},{"name":"18300","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18300"},{"name":"16157","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16157"},{"name":"20060105 [eVuln] ADNForum Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/420990/100/0/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-01-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1015445","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015445"},{"name":"22240","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/22240"},{"tags":["x_refsource_MISC"],"url":"http://evuln.com/vulns/15/summary.html"},{"name":"22241","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/22241"},{"name":"ADV-2006-0077","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/0077"},{"name":"18300","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18300"},{"name":"16157","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16157"},{"name":"20060105 [eVuln] ADNForum Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/420990/100/0/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0123","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1015445","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015445"},{"name":"22240","refsource":"OSVDB","url":"http://www.osvdb.org/22240"},{"name":"http://evuln.com/vulns/15/summary.html","refsource":"MISC","url":"http://evuln.com/vulns/15/summary.html"},{"name":"22241","refsource":"OSVDB","url":"http://www.osvdb.org/22241"},{"name":"ADV-2006-0077","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/0077"},{"name":"18300","refsource":"SECUNIA","url":"http://secunia.com/advisories/18300"},{"name":"16157","refsource":"BID","url":"http://www.securityfocus.com/bid/16157"},{"name":"20060105 [eVuln] ADNForum Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/420990/100/0/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0123","datePublished":"2006-01-09T11:00:00.000Z","dateReserved":"2006-01-09T00:00:00.000Z","dateUpdated":"2024-08-07T16:25:33.619Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-01-09 11:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adn_forum:adn_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E94E497D-964B-49DA-A571-EC4AC7A5F57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adn_forum:adn_forum:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"3940E6F8-BA82-478E-A7AF-7F21E86166F0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"123","Ordinal":"1","Title":"CVE-2006-0123","CVE":"CVE-2006-0123","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"123","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors.","Type":"Description","Title":"CVE-2006-0123"},{"CveYear":"2006","CveId":"123","Ordinal":"2","NoteData":"2006-01-09","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"123","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}