CVE

Id
16773  
CVE No.
CVE-2006-0669  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in archive.asp in GA"s Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker"s research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments.  
Phase
Assigned (20060213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
135893 16773 CVE-2006-0669 VIM:20060220 vendor dispute for CVE-2006-0669  View
135894 16773 CVE-2006-0669 URL:http://www.attrition.org/pipermail/vim/2006-February/000561.html  View
135895 16773 CVE-2006-0669 BID:16563  View
135896 16773 CVE-2006-0669 URL:http://www.securityfocus.com/bid/16563  View
135897 16773 CVE-2006-0669 OSVDB:23509  View
135898 16773 CVE-2006-0669 URL:http://www.osvdb.org/23509  View
135899 16773 CVE-2006-0669 SECTRACK:1015600  View
135900 16773 CVE-2006-0669 URL:http://securitytracker.com/id?1015600  View
135901 16773 CVE-2006-0669 XF:gasforumlight-archive-sql-injection(24616)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61611 JVNDB-2006-003877 複数の Sony Ericsson 製品におけるバッファオーバーフローの脆弱性 Sony Ericsson K600i、V600i、W800i、および T68i cell phone には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-0671 16773 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003877.html  View