CVE-2006-0444 - CVE House
Back to Database
Status published Medium CVE-2006-0444

SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1...

Vulnerability Description

SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0444

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpclanwebsite

View All →
CVE-2008-5879
Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW)...
Medium 4.3
CVE-2008-5878
Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix...
Medium 5.1
CVE-2008-5877
Multiple SQL injection vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix...
Medium 6.8
CVE-2006-0445
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain...
Medium 4
CVE-2006-0366
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote...
Medium 4.3

Affected Vendor

phpclanwebsite

View all reports →

Affected Software

phpclanwebsite
Vulnerable Versions:
1.23.1

Timeline

Official Publish: January 26th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.