Back

CVE-2006-0545

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.

Published: Feb 4, 2006 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (11)

Vendor Product Version
ubbcentral ubb.threads 6.0
ubbcentral ubb.threads 6.0.1
ubbcentral ubb.threads 6.0.2
ubbcentral ubb.threads 6.0.3
ubbcentral ubb.threads 6.1
ubbcentral ubb.threads 6.1.1
ubbcentral ubb.threads 6.2
ubbcentral ubb.threads 6.2.1
ubbcentral ubb.threads 6.2.2
ubbcentral ubb.threads 6.2.3
ubbcentral ubb.threads 6.3

GitHub Security Advisory GHSA-3chh-93gv-xf67

SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.28%

Top 32% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub