CVE-2006-3394

EPSS 1.3%

SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1975unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20908 https://exchange.xforce.ibmcloud.com/vulnerabilities/27496 https://www.exploit-db.com/exploits/1975 http://www.osvdb.org/26938 http://www.securityfocus.com/bid/18765 http://www.vupen.com/english/advisories/2006/2630