CVE-2006-2740

no score yetEPSS 4.0%

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2006-06-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

epic_designs:tinybb

References

http://secunia.com/advisories/20356
http://securityreason.com/securityalert/1011
http://securitytracker.com/id?1016172
http://www.nukedx.com/?getxpl=33
http://www.nukedx.com/?viewdoc=33

Check your stack JSON