CVE

Id
16626  
CVE No.
CVE-2006-0522  
Status
Candidate  
Description
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.  
Phase
Assigned (20060202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134202 16626 CVE-2006-0522 CONFIRM:http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html  View
134203 16626 CVE-2006-0522 BID:16452  View
134204 16626 CVE-2006-0522 URL:http://www.securityfocus.com/bid/16452  View
134205 16626 CVE-2006-0522 VUPEN:ADV-2006-0402  View
134206 16626 CVE-2006-0522 URL:http://www.vupen.com/english/advisories/2006/0402  View
134207 16626 CVE-2006-0522 OSVDB:22883  View
134208 16626 CVE-2006-0522 URL:http://www.osvdb.org/22883  View
134209 16626 CVE-2006-0522 SECTRACK:1015561  View
134210 16626 CVE-2006-0522 URL:http://securitytracker.com/id?1015561  View
134211 16626 CVE-2006-0522 SECUNIA:18689  View
134212 16626 CVE-2006-0522 URL:http://secunia.com/advisories/18689  View
134213 16626 CVE-2006-0522 XF:symantec-sms-sql-injection(24413)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61591 JVNDB-2006-003857 Derek Ashauer ashNews におけるクロスサイトスクリプティングの脆弱性 Derek Ashauer ashNews には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-0524 16626 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003857.html  View