CVE-2006-1572: o2php.com Oxygen

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action.

Affected products

• o2php.com Oxygen: version 1.0.11 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only

Published 2006-04-01. Last modified 2026-06-16.