https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 07:51:37 +0000 https://db.gcve.eu/vuln/fkie_cve-2006-3249 <p>SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating &#34;If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results. It IS NOT however a sql injection error.&#34; While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue</p> <p>SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating &#34;If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results. It IS NOT however a sql injection error.&#34; While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue</p> https://db.gcve.eu/vuln/fkie_cve-2006-3249 https://db.gcve.eu/vuln/ghsa-8mw2-4xfj-9rvq <p>** DISPUTED ** SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating &#34;If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results. It IS NOT however a sql injection error.&#34; While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue.</p> <p>** DISPUTED ** SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating &#34;If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results. It IS NOT however a sql injection error.&#34; While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue.</p> https://db.gcve.eu/vuln/ghsa-8mw2-4xfj-9rvq https://db.gcve.eu/vuln/gsd-2006-3249 gsd-2006-3249 https://db.gcve.eu/vuln/gsd-2006-3249