CVE-2006-5738

Estado: ModificadaAlta (7.2)—
Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 7.2
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.88%
Percentil entre todas las CVEs puntuadas: 58
Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Punbb — Punbb
CWE

NVD-CWE-Other
CWE-89
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5738",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2006-5738",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-03T15:22:32.089535Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-06T18:07:00.000",
  "references": [
    {
      "url": "http://forums.punbb.org/viewtopic.php?id=13496",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.punbb.org/viewtopic.php?id=13496",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inyección SQL en  PunBB anetrior a 1.2.14 permiten a adminstradores autenticados remotamente ejecutar comandos SQL de su elección a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T22:31:44.693",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:punbb:punbb:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "56DC915E-4213-4B4E-9B9C-B952A3BF0EFB",
              "versionEndIncluding": "1.2.13"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92F62C7C-EA7A-40B2-A8A0-5FEA69DF321B"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8827471A-6FCC-48A6-BBAA-6DC82EA42EB4"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C68B349F-F76D-49D2-95DA-C8670E32530A"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB336F6C-E81A-43C2-A252-36A192D9CADD"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_beta1a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA2C26FE-F2D3-4C1A-8D14-E4B818834703"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91EBBB6B-A4F7-45A3-8BAB-26CEBCD3156E"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53C4E00F-E370-4DD1-B760-8AA0CEC4E536"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00082231-3168-4FCC-807B-8AD3DBBFCE92"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B77FF770-BEB4-4320-AA45-399A5CC6540A"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E04494D1-FE7F-431C-8242-A0591A5D0A6A"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A97DA335-4815-4608-84D5-67F4E539D8F0"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9481F02E-2523-4599-A39D-3ACE518CEC35"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01C976DD-47E4-48CA-AF99-93D0653D31F0"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1AAB3BF-EBFA-4F55-A3D4-0B26F749D91E"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7277A122-5963-4E7F-BA1A-62B19AF804EB"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEF85286-A1F8-4797-99F0-4F42B6D859CF"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05BCF8A0-5530-4B36-8CEA-5330307C74CC"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8EDF1AE-B415-4B5B-80CD-0B96AFA21D81"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDBA41AF-C817-476A-8ED1-57808D0B678C"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C353C194-328F-4C4C-9773-F06A0FA3978C"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFE58D68-FC34-4F70-849A-2E6CC919230D"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5713E747-5529-4A64-95B4-D9678D8E88B3"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C920E92-B2AE-416D-9669-9A4FBFE0AE8D"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DFD4225-32F9-4D62-87C5-9632A1C03326"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A75787B-6156-4710-9B24-48C5763E7771"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20A9473E-DE15-4BE2-839D-90B55F8713EB"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4A94FF3-C732-4552-A32B-53C4739F7E52"
            },
            {
              "criteria": "cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01063CD1-BCE0-4C0A-AE34-AC4CCFD5802B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Successful exploitation requires that the attacker is an authenticated Administrator."
}