CVE-2006-4667

HIGH · CVSS 7.5 EPSS 2.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-09-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2006-4667

Severity

HIGH

CVSS

7.5

EPSS

2.43%

Original Filing — NVD Description

Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the (2) timezone_offset and (3) umode parameters in (b) class/xoopsuser.php.