CVE-2006-0135

SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication…

published January 9, 2006

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02324 · 83.4th percentile
Published
2006-01-09T11:00Z
EPSS history
Timeline
  • 09 JAN 11:00Z
    SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication…
    cvelistv5