Test ID:	1.3.6.1.4.1.25623.1.0.60128
Category:	CGI abuses
Title:	FlexBB <= 0.5.5 SQL Injection
Summary:	NOSUMMARY
Description:	Description: The installed version of FlexBB, according to the version number, is vulnerable to a SQL injection attack as a result of insufficient data sanitization of the flexbb_temp_id and flexbb_username parameters in a cookie. Versions up to and including 0.5.5 are vulnerable. Solution : Upgrade to a later version. Risk factor : High CVSS Score: 7.5
Cross-Ref:	BugTraq ID: 17574 BugTraq ID: 17568 Common Vulnerability Exposure (CVE) ID: CVE-2006-2034 http://www.securityfocus.com/bid/17574 Bugtraq: 20060421 FlexBB 0.5.5 Exploit [ function/showprofile.php ] Remote SQL Injection (Google Search) http://www.securityfocus.com/archive/1/431793/100/0/threaded http://www.osvdb.org/24867 Common Vulnerability Exposure (CVE) ID: CVE-2006-1978 http://www.securityfocus.com/bid/17568 Bugtraq: 20060417 FlexBB 0.5.5 Bypass Exploit (Google Search) http://www.securityfocus.com/archive/1/431156/100/0/threaded https://www.exploit-db.com/exploits/1686 http://securitytracker.com/id?1015949
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.