CVE-2006-6521 - SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter

Published Dec 14, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.08%

Description

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/23319
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/2026
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453965/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21513
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6504
Advisory

Link	Providers	Tags
http://secunia.com/advisories/23319		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/2026		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/453965/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/21513		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6504		Advisory