CVE-2006-1708 Information

Description

SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php.

Reference

http://secunia.com/advisories/19609 http://securitytracker.com/id?1015935 http://www.securityfocus.com/bid/17456 http://www.vupen.com/english/advisories/2006/1295 https://exchange.xforce.ibmcloud.com/vulnerabilities/25746 https://www.exploit-db.com/exploits/1662