Vulnerabilities

TI-2006-06572 CVE-2006-6829 · GHSA-3fq7-38hc-94p4

Efkan Forum 1.0 and earlier store sensitive information under the web root with…

LOW 37

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01468 Published 2007-01-01 No fix listed

TI-2006-06571 CVE-2006-6828 · GHSA-gwrh-7gx7-phhg

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the grup parameter in admin.asp, or the id parameter in (2) default.asp or (3) admin.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01106 Published 2007-01-01 No fix listed

TI-2006-06538 CVE-2006-6794 · GHSA-cr2c-3h8m-xgmr

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the grup parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01073 Published 2006-12-28 No fix listed

Vulnerabilities

Filters

Efkan Forum 1.0 and earlier store sensitive information under the web root with…

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote…

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to…