CVE-2006-0821 - SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter

HIGH

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter

Published Feb 21, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.21%

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://secunia.com/advisories/18929		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.vupen.com/english/advisories/2006/0660		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/24783		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1513		exploitx_refsource_EXPLOIT-DB

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 21, 2006

Updated Aug 7, 2024

Reserved Feb 21, 2006

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a