cve/2006/CVE-2006-1134.md

CVE-2006-1134

Description

SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php.

POC

Reference

• http://evuln.com/vulns/91/description.html
• http://securityreason.com/securityalert/582

Github

No PoCs found on GitHub currently.