CVE-2006-1811: Flexbb

Medium severity, CVSS 6.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Location, (12) Signature, and (13) Sub-Titles fields in the user profile; or (14) flexbb_password field in a cookie.

Affected products

• Flexbb Flexbb: version 0.5.5_beta only

Published 2006-04-18. Last modified 2026-06-16.