CVE-2006-1051 - SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php

Published Mar 7, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.21%

Description

SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors, possibly involving the username parameter to akarru.lib/users.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/19112
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783
x_refsource_CONFIRM
http://www.securityfocus.com/bid/16989
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/0841
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1055
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25115
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19112		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=398713&group_id=155783		x_refsource_CONFIRM
http://www.securityfocus.com/bid/16989		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/0841		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1055		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25115		vdb-entryx_refsource_XF