CVE-2006-4736

Summary

Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters. NOTE: some of these details are obtained from third party information.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2006/3561
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28877
• http://securityreason.com/securityalert/1563
• http://www.securityfocus.com/archive/1/445789/100/0/threaded
• http://secunia.com/advisories/21860
• http://www.securityfocus.com/bid/19950

References

• http://www.vupen.com/english/advisories/2006/3561
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28877
• http://securityreason.com/securityalert/1563
• http://www.securityfocus.com/archive/1/445789/100/0/threaded
• http://secunia.com/advisories/21860
• http://www.securityfocus.com/bid/19950

• ←Previous
• Next→