CVE-2006-6193 - SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Dec 1, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.24%

SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://secunia.com/advisories/23102		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/21293		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/4703		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/30487		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2848		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 1, 2006

Updated Aug 7, 2024

Reserved Nov 30, 2006

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a