CVE-2006-1481 - SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter

Published Mar 29, 2006

6.5

MEDIUM

CVSS 2.0

EPSS 1.02%

Description

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/19412
third-party-advisoryx_refsource_SECUNIAExploit
http://www.securityfocus.com/bid/17229
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1106
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1485
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25436
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1609
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/19412		third-party-advisoryx_refsource_SECUNIAExploit
http://www.securityfocus.com/bid/17229		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/1106		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1485		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25436		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1609		exploitx_refsource_EXPLOIT-DB