Unrated severityNVD Advisory· Published May 9, 2006· Updated Jun 16, 2026
CVE-2006-2255
CVE-2006-2255
Description
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:creative_software:community_portal:1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:creative_software:community_portal:1.1:*:*:*:*:*:*:*
- (no CPE)range: <=1.1
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/19999nvdExploitVendor Advisory
- pridels0.blogspot.com/2006/05/creative-community-portal-vuln.htmlnvd
- www.osvdb.org/25307nvd
- www.osvdb.org/25308nvd
- www.osvdb.org/25309nvd
- www.osvdb.org/25310nvd
- www.osvdb.org/25311nvd
- www.osvdb.org/25312nvd
- www.securityfocus.com/bid/17890nvd
- www.vupen.com/english/advisories/2006/1688nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/26313nvd
News mentions
0No linked articles in our index yet.