CVE

Id
16621  
CVE No.
CVE-2006-0517  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to "session handling"; and (5) when posting "petitions".  
Phase
Assigned (20060202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134140 16621 CVE-2006-0517 BUGTRAQ:20060131 ZRCSA-200601: SPIP - Multiple Vulnerabilities  View
134141 16621 CVE-2006-0517 URL:http://www.securityfocus.com/archive/1/archive/1/423655/100/0/threaded  View
134142 16621 CVE-2006-0517 FULLDISC:20060131 ZRCSA-200601: SPIP - Multiple Vulnerabilities  View
134143 16621 CVE-2006-0517 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html  View
134144 16621 CVE-2006-0517 MISC:http://www.zone-h.org/en/advisories/read/id=8650/  View
134145 16621 CVE-2006-0517 BID:24397  View
134146 16621 CVE-2006-0517 URL:http://www.securityfocus.com/bid/24397  View
134147 16621 CVE-2006-0517 BID:16458  View
134148 16621 CVE-2006-0517 URL:http://www.securityfocus.com/bid/16458  View
134149 16621 CVE-2006-0517 VUPEN:ADV-2006-0398  View
134150 16621 CVE-2006-0517 URL:http://www.vupen.com/english/advisories/2006/0398  View
134151 16621 CVE-2006-0517 OSVDB:22844  View
134152 16621 CVE-2006-0517 URL:http://www.osvdb.org/22844  View
134153 16621 CVE-2006-0517 OSVDB:22845  View
134154 16621 CVE-2006-0517 URL:http://www.osvdb.org/22845  View
134155 16621 CVE-2006-0517 OSVDB:22848  View
134156 16621 CVE-2006-0517 URL:http://www.osvdb.org/22848  View
134157 16621 CVE-2006-0517 SECTRACK:1015556  View
134158 16621 CVE-2006-0517 URL:http://securitytracker.com/id?1015556  View
134159 16621 CVE-2006-0517 SECUNIA:18676  View
134160 16621 CVE-2006-0517 URL:http://secunia.com/advisories/18676  View
134161 16621 CVE-2006-0517 SREASON:395  View
134162 16621 CVE-2006-0517 URL:http://securityreason.com/securityalert/395  View
134163 16621 CVE-2006-0517 XF:spip-forum-sql-injection(24397)  View

Related JVN