CVE-2006-3691 - Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php

Published Jul 18, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.72%

Description

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://securityreason.com/securityalert/1244
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/28254
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/440114/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440133/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440141/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440145/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/491770/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18937
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3686
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42254
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/1244		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/28254		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/440114/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440133/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440141/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/440145/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/491770/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/18937		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-3686		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42254		vdb-entryx_refsource_XF