← back
CVE-2006-0774

CVE-2006-0774

EPSS 1.8%
SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27202unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/18805https://exchange.xforce.ibmcloud.com/vulnerabilities/24673http://www.gulftech.org/?node=research&article_id=00099-02112006http://www.osvdb.org/23104http://www.securityfocus.com/archive/1/424819/100/0/threadedhttp://www.securityfocus.com/archive/1/433132/30/5160/threadedhttp://www.securityfocus.com/bid/16598http://www.vupen.com/english/advisories/2006/0528