CVE-2006-6478

no score yetEPSS 11%

scriptphp annoncescripthp: no CVSS score yet. EPSS 11% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php.

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2006-12-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

scriptphp:annoncescripthp

References

http://secunia.com/advisories/23318
http://securityreason.com/securityalert/2019
http://www.securityfocus.com/archive/1/453966/100/0/threaded
http://www.securityfocus.com/bid/21514
http://www.vupen.com/english/advisories/2006/4940

Check your stack JSON