CVE-2006-2638: Qjstudios Qjforum

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the uName parameter.

Affected products

• Qjstudios Qjforum: any version

Published 2006-05-30. Last modified 2026-06-16.