← Database

CVE-2006-2835

HIGH CVSS: 7.5 Published: 2006-06-06 Modified: 2026-06-16

Description

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php.

Affected Platforms

Arabless Saphplesson

Weakness Type

NVD-CWE-Other

References