CVE-2006-4606

EPSS 2.4%

Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/3538unverified cve_referencewww.exploit-db.com/exploits/8425unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21738 http://securityreason.com/securityalert/1499 https://www.exploit-db.com/exploits/3538 https://www.exploit-db.com/exploits/8425 http://www.attrition.org/pipermail/vim/2009-April/002167.html http://www.osvdb.org/28445 http://www.osvdb.org/28446 http://www.osvdb.org/28447 http://www.osvdb.org/28448 http://www.osvdb.org/28451 http://www.osvdb.org/28452 http://www.securityfocus.com/archive/1/445007/100/0/threaded