CVE-2006-2255
Last modified
CVE-2006-2255 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php.. EPSS estimates a 2.38% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Creative Software | Community Portal | 1.1 |
References
- http://secunia.com/advisories/19999Exploit, Vendor Advisory
- http://secunia.com/advisories/19999Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2255?
How severe is CVE-2006-2255?
How do I fix CVE-2006-2255?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2249Multiple cross-site scripting (XSS) vulnerabilities in searc…
- CVE-2006-2250CuteNews 1.4.1 allows remote attackers to obtain sensitive i…
- CVE-2006-2251SQL injection vulnerability in the do_mmod function in mod.p…
- CVE-2006-2252Cross-site scripting vulnerability in submit.php in OpenFAQ …
- CVE-2006-2253PHP remote file inclusion vulnerability in visible_count_inc…
- CVE-2006-2254Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remo…
- CVE-2006-2256PHP remote file inclusion vulnerability in includes/dbal.php…
- CVE-2006-2257Cross-site scripting (XSS) vulnerability in index.php in eas…
- CVE-2006-2258Cross-site scripting (XSS) vulnerability in Logon.asp in Max…
- CVE-2006-2259SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0…
- CVE-2006-2260Cross-site scripting (XSS) vulnerability in the project modu…
- CVE-2006-2261PHP remote file inclusion vulnerability in day.php in ACal 2…
Are you affected by CVE-2006-2255?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST