CVE-2006-4606 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-4606
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-4606

Description: Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php.

CVE Status: Candidate

References: VIM http://www.attrition.org/pipermail/vim/2009-April/002167.html SREASON http://securityreason.com/securityalert/1499 SAID Secunia Advisory: SA21738 OSVDB 28445 28446 28447 28448 28451 28452 MILW0RM http://www.milw0rm.com/exploits/8425 http://www.milw0rm.com/exploits/3538 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/502637/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/445007/100/0/threaded BID 19818 23079

Return to the previous page.