Back

CVE-2006-0668

SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Published: Feb 13, 2006 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
pwsphp pwsphp 1.2.3

GitHub Security Advisory GHSA-w7wx-43xv-3pqw

SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.21%

Top 34% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub