{"api_version":"1","generated_at":"2026-07-23T01:26:58+00:00","cve":"CVE-2006-0809","urls":{"html":"https://cve.report/CVE-2006-0809","api":"https://cve.report/api/cve/CVE-2006-0809.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0809","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0809"},"summary":{"title":"CVE-2006-0809","description":"Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-02-21 02:02:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://evuln.com/vulns/84/summary.html","name":"http://evuln.com/vulns/84/summary.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"eVuln.com - Skate Board Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/540","name":"http://securityreason.com/securityalert/540","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24779","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24779","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/23302","name":"http://www.osvdb.org/23302","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24778","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24778","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18978","name":"http://secunia.com/advisories/18978","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - Skate Board Script Insertion and SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/426658/30/0/threaded","name":"http://www.securityfocus.com/archive/1/426658/30/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/16936","name":"http://www.securityfocus.com/bid/16936","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Skate Board Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/23303","name":"http://www.osvdb.org/23303","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.osvdb.org/23301","name":"http://www.osvdb.org/23301","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0809","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0809","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"809","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"skate_board","cpe5":"skate_board","cpe6":"0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"809","cve":"CVE-2006-0809","epss":"0.015250000","percentile":"0.813140000","score_date":"2026-04-16","updated_at":"2026-04-17 00:09:25"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:48:56.456Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"16936","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16936"},{"name":"23302","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23302"},{"name":"23303","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23303"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://evuln.com/vulns/84/summary.html"},{"name":"skateboard-authentication-bypass(24779)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24779"},{"name":"20060303 [eVuln] Skate Board Multimple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/426658/30/0/threaded"},{"name":"skateboard-sendpass-sql-injection(24778)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24778"},{"name":"540","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/540"},{"name":"18978","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18978"},{"name":"23301","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23301"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-02-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-19T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"16936","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16936"},{"name":"23302","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23302"},{"name":"23303","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23303"},{"tags":["x_refsource_MISC"],"url":"http://evuln.com/vulns/84/summary.html"},{"name":"skateboard-authentication-bypass(24779)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24779"},{"name":"20060303 [eVuln] Skate Board Multimple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/426658/30/0/threaded"},{"name":"skateboard-sendpass-sql-injection(24778)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24778"},{"name":"540","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/540"},{"name":"18978","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18978"},{"name":"23301","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23301"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0809","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"16936","refsource":"BID","url":"http://www.securityfocus.com/bid/16936"},{"name":"23302","refsource":"OSVDB","url":"http://www.osvdb.org/23302"},{"name":"23303","refsource":"OSVDB","url":"http://www.osvdb.org/23303"},{"name":"http://evuln.com/vulns/84/summary.html","refsource":"MISC","url":"http://evuln.com/vulns/84/summary.html"},{"name":"skateboard-authentication-bypass(24779)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24779"},{"name":"20060303 [eVuln] Skate Board Multimple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/426658/30/0/threaded"},{"name":"skateboard-sendpass-sql-injection(24778)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24778"},{"name":"540","refsource":"SREASON","url":"http://securityreason.com/securityalert/540"},{"name":"18978","refsource":"SECUNIA","url":"http://secunia.com/advisories/18978"},{"name":"23301","refsource":"OSVDB","url":"http://www.osvdb.org/23301"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0809","datePublished":"2006-02-21T02:00:00.000Z","dateReserved":"2006-02-21T00:00:00.000Z","dateUpdated":"2024-08-07T16:48:56.456Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-02-21 02:02:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skate_board:skate_board:0.9:*:*:*:*:*:*:*","matchCriteriaId":"ABCF7C6F-4AEB-435A-845B-BFF7E90248E1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"809","Ordinal":"1","Title":"CVE-2006-0809","CVE":"CVE-2006-0809","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"809","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php.","Type":"Description","Title":"CVE-2006-0809"},{"CveYear":"2006","CveId":"809","Ordinal":"2","NoteData":"2006-02-20","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"809","Ordinal":"3","NoteData":"2017-07-19","Type":"Other","Title":"Modified"}]}}}