CVE-2006-0906 - SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in (1) fastlinks.php and (2) catogary.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in (1) fastlinks.php and (2) catogary.php

Published Feb 28, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.24%

Description

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in (1) fastlinks.php and (2) catogary.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/19062
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015687
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/426197/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16853
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0757
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0910
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24941
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19062		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015687		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/426197/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/16853		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0757		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0910		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24941		vdb-entryx_refsource_XF