CVE-2006-1123 - SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie

Back Back to CVE browser

HIGH

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie

Published Mar 9, 2006

10.0

HIGH

CVSS 2.0

EPSS 2.00%

Description

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

http://secunia.com/advisories/19177
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/559
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/23770
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427103/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17035
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0896
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1127
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25215
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19177		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://securityreason.com/securityalert/559		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/23770		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427103/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17035		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0896		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1127		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25215		vdb-entryx_refsource_XF