CVE-2006-2855 - SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter

HIGH

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter

Published Jun 6, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.14%

SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://downloads.securityfocus.com/vulnerabilities/exploits/xueBook_poc.txt		x_refsource_MISCExploit
http://secunia.com/advisories/20511		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/18262		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/2212		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2852		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27002		vdb-entryx_refsource_XF