CVE

Id
16878  
CVE No.
CVE-2006-0774  
Status
Candidate  
Description
SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.  
Phase
Assigned (20060218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137485 16878 CVE-2006-0774 BUGTRAQ:20060211 DB_eSession deleteSession() SQL injection  View
137486 16878 CVE-2006-0774 URL:http://www.securityfocus.com/archive/1/archive/1/424819/100/0/threaded  View
137487 16878 CVE-2006-0774 BUGTRAQ:20060501 Re: DB_eSession deleteSession() SQL injection  View
137488 16878 CVE-2006-0774 URL:http://www.securityfocus.com/archive/1/archive/1/433132/30/5160/threaded  View
137489 16878 CVE-2006-0774 MISC:http://www.gulftech.org/?node=research&article_id=00099-02112006  View
137490 16878 CVE-2006-0774 BID:16598  View
137491 16878 CVE-2006-0774 URL:http://www.securityfocus.com/bid/16598  View
137492 16878 CVE-2006-0774 VUPEN:ADV-2006-0528  View
137493 16878 CVE-2006-0774 URL:http://www.vupen.com/english/advisories/2006/0528  View
137494 16878 CVE-2006-0774 OSVDB:23104  View
137495 16878 CVE-2006-0774 URL:http://www.osvdb.org/23104  View
137496 16878 CVE-2006-0774 SECUNIA:18805  View
137497 16878 CVE-2006-0774 URL:http://secunia.com/advisories/18805  View
137498 16878 CVE-2006-0774 XF:dbesession-deletesession-sql-injection(24673)  View

Related JVN