{"api_version":"1","generated_at":"2026-07-23T14:20:55+00:00","cve":"CVE-2006-4632","urls":{"html":"https://cve.report/CVE-2006-4632","api":"https://cve.report/api/cve/CVE-2006-4632.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4632","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4632"},"summary":{"title":"CVE-2006-4632","description":"Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-08 20:04:00","updated_at":"2018-10-17 21:38:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"http://www.vupen.com/english/advisories/2006/3478","name":"ADV-2006-3478","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/28578","name":"28578","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28747","name":"softbb-addmembre-sql-injection(28747)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://acid-root.new.fr/advisories/10060904.txt","name":"http://acid-root.new.fr/advisories/10060904.txt","refsource":"MISC","tags":[],"title":"new.fr is available for purchase - Sedo.com","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://securitytracker.com/id?1016785","name":"1016785","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - SoftBB Lets Remote Users Inject SQL Commands and Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/445087/100/0/threaded","name":"20060904 SoftBB 0.1 Remote PHP Code Execution Exploit","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21761","name":"21761","refsource":"SECUNIA","tags":[],"title":"SoftBB SQL and PHP Code Injection Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/28577","name":"28577","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/1521","name":"1521","refsource":"SREASON","tags":[],"title":"SecurityReason - SoftBB 0.1 Remote PHP Code Execution Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/2300","name":"2300","refsource":"EXPLOIT-DB","tags":[],"title":"SoftBB 0.1 - 'cmd' Remote Command Execution - PHP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4632","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4632","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4632","vulnerable":"1","versionEndIncluding":"0.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"softbb","cpe5":"softbb","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4632","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"2300","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/2300"},{"name":"28578","refsource":"OSVDB","url":"http://www.osvdb.org/28578"},{"name":"28577","refsource":"OSVDB","url":"http://www.osvdb.org/28577"},{"name":"21761","refsource":"SECUNIA","url":"http://secunia.com/advisories/21761"},{"name":"ADV-2006-3478","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3478"},{"name":"1016785","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016785"},{"name":"1521","refsource":"SREASON","url":"http://securityreason.com/securityalert/1521"},{"name":"http://acid-root.new.fr/advisories/10060904.txt","refsource":"MISC","url":"http://acid-root.new.fr/advisories/10060904.txt"},{"name":"softbb-addmembre-sql-injection(28747)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28747"},{"name":"20060904 SoftBB 0.1 Remote PHP Code Execution Exploit","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/445087/100/0/threaded"}]}},"nvd":{"publishedDate":"2006-09-08 20:04:00","lastModifiedDate":"2018-10-17 21:38:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4632","Ordinal":"19968","Title":"CVE-2006-4632","CVE":"CVE-2006-4632","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4632","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) groupe parameter in addmembre.php and the (2) select parameter in moveto.php.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4632","Ordinal":"2","NoteData":"2006-09-08","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4632","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}