{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T05:08:51.844","vulnerabilities":[{"cve":{"id":"CVE-2006-3168","sourceIdentifier":"cve@mitre.org","published":"2006-06-23T00:02:00.000","lastModified":"2026-06-16T22:26:32.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en CS-Forum anterior a v 0.82, permite a atacantes remotos ejecutar comandos SQL de su elecció na través de los parámetros (1) id y (2) debut en (a) read.php, y los parámetros (3) search y (4) debut en (b) index.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comscripts:cs-forum:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"4BA30FD7-BA98-4C4C-8D52-8C55C48F4DE8"}]}]}],"references":[{"url":"http://secunia.com/advisories/20534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/1124","source":"cve@mitre.org"},{"url":"http://www.acid-root.new.fr/advisories/csforum081.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.comscripts.com/scripts/php.cs-forum.643.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/26382","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/26383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/436789/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27176","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/1124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.acid-root.new.fr/advisories/csforum081.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.comscripts.com/scripts/php.cs-forum.643.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/26382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/26383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/436789/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}