← Database

CVE-2006-6912

HIGH CVSS: 7.5 Published: 2006-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter.

Affected Platforms

Phpmyfaq Phpmyfaq

Weakness Type

CWE-89

References