CVE-2006-5736
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is...
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
- Record
CVE-2006-5736- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
- Record
CVE-2006-5736- Updated
- 2026-11-02
EUVDEUVD-2006-5720No score
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
- Record
EUVD-2006-5720- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-48qc-mphm-xc27No score
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is...
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
- Record
GHSA-48qc-mphm-xc27- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5736 is a medium vulnerability (CVSS 5.1) in Punbb, published November 6, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.
References
securitytracker.com/id?1017131
securityreason.com/securityalert/1824
securityfocus.com/archive/1/450055/100/0/threaded
vupen.com/english/advisories/2006/4256
wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities
osvdb.org/30133
punbb.org/changelogs/1.2.13_to_1.2.14.txt
nvd.nist.gov/vuln/detail/CVE-2006-5736
github.com/advisories/GHSA-48qc-mphm-xc27