CVE-2006-4350 - SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

HIGH

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Aug 24, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.20%

SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://securityreason.com/securityalert/1448		third-party-advisoryx_refsource_SREASON
http://securityreason.com/securityalert/1460		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/443631/100/0/threaded		mailing-listx_refsource_BUGTRAQ

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 24, 2006

Updated Aug 7, 2024

Reserved Aug 24, 2006

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a