CVE-2006-7057 - SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the category parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the category parameter

Published Feb 24, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.05%

Description

SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue might be primary to CVE-2006-2506.2.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://secunia.com/advisories/20131
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.vupen.com/english/advisories/2006/1845
vdb-entryx_refsource_VUPEN

Link	Providers	Tags
http://secunia.com/advisories/20131		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://www.vupen.com/english/advisories/2006/1845		vdb-entryx_refsource_VUPEN

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 24, 2007

Updated Aug 7, 2024

Reserved Feb 23, 2007

Link CVE-2006-7057

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-7057

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-7057