CVE-2006-3565 - SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the fields[] parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the fields[] parameter

Published Jul 13, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.34%

Description

SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the fields[] parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://pridels0.blogspot.com/2006/07/hivemail-vuln.html
x_refsource_MISC
http://secunia.com/advisories/20993
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1016531
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/27099
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/18949
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/27694
vdb-entryx_refsource_XF

Link	Providers	Tags
http://pridels0.blogspot.com/2006/07/hivemail-vuln.html		x_refsource_MISC
http://secunia.com/advisories/20993		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1016531		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/27099		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/18949		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/27694		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 13, 2006

Updated Aug 7, 2024

Reserved Jul 12, 2006

Link CVE-2006-3565

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3565

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3565