← Database

CVE-2006-1978

HIGH CVSS: 7.5 Published: 2006-04-21 Modified: 2026-06-16

Description

SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.

Affected Platforms

Flexbb Flexbb

Weakness Type

CWE-89

References