CVE-2006-3996 - SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters

Back Back to CVE browser

MEDIUM

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters

Published Aug 5, 2006

6.5

MEDIUM

CVSS 2.0

EPSS 1.76%

Description

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://atutor.ca/news.php#010806
x_refsource_MISC
http://retrogod.altervista.org/atutor_1531_sql.html
x_refsource_MISCExploit
http://secunia.com/advisories/21308
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/1330
third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/27665
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/441711/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19232
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3074
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28082
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2088
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://atutor.ca/news.php#010806		x_refsource_MISC
http://retrogod.altervista.org/atutor_1531_sql.html		x_refsource_MISCExploit
http://secunia.com/advisories/21308		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securityreason.com/securityalert/1330		third-party-advisoryx_refsource_SREASON
http://www.osvdb.org/27665		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/441711/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19232		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/3074		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28082		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2088		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 5, 2006

Updated Aug 7, 2024

Reserved Aug 4, 2006

Link CVE-2006-3996

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3996

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3996