Unscored severity · published Sep 19, 2006
CVE-2006-4867
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is "Forum."
–
CVSS
2.4%
EPSS
No
On KEV
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
Gnuturk Portal System · Gnuturk
through 2g · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4867
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4867
Vendor Advisory
http://secunia.com/advisories/21956
www.gnuturk.com
http://www.gnuturk.com/mods.php?go=Forums&p=vtop&t_id=138
Exploit
http://www.securityfocus.com/bid/20069
www.vupen.com
http://www.vupen.com/english/advisories/2006/3660
www.exploit-db.com
https://www.exploit-db.com/exploits/2378
More from Gnuturk Portal System
–
CVE-2007-2879
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter