CVE

Id
17393  
CVE No.
CVE-2006-1289  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, (3) team, (4) level, (5) status, (6) teamname, and (7) teamlead parameters in (a) auth.php; the (8) username, (9) action, and (10) filter parameters in (b) authuser.php; the (11) username parameter in (c) utils.php; the (12) id and (13) date parameters in (d) traffic.php; the (14) username parameter in (e) userstatistics.php; and the (15) USERNAME and (16) PASSWORD parameters in a cookie to (f) chgpwd.php.  
Phase
Assigned (20060319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143766 17393 CVE-2006-1289 BUGTRAQ:20060316 Milkeyway Multiple Vulnerabilities  View
143767 17393 CVE-2006-1289 URL:http://www.securityfocus.com/archive/1/archive/1/427890/100/0/threaded  View
143768 17393 CVE-2006-1289 MISC:http://www.ush.it/team/ascii/hack-milkeway/milkeyway.txt  View
143769 17393 CVE-2006-1289 MISC:http://www.ush.it/team/ascii/hack-milkeway/advisory.txt  View
143770 17393 CVE-2006-1289 BID:17127  View
143771 17393 CVE-2006-1289 URL:http://www.securityfocus.com/bid/17127  View
143772 17393 CVE-2006-1289 VUPEN:ADV-2006-0968  View
143773 17393 CVE-2006-1289 URL:http://www.vupen.com/english/advisories/2006/0968  View
143774 17393 CVE-2006-1289 OSVDB:23925  View
143775 17393 CVE-2006-1289 URL:http://www.osvdb.org/23925  View
143776 17393 CVE-2006-1289 OSVDB:23927  View
143777 17393 CVE-2006-1289 URL:http://www.osvdb.org/23927  View
143778 17393 CVE-2006-1289 OSVDB:23928  View
143779 17393 CVE-2006-1289 URL:http://www.osvdb.org/23928  View
143780 17393 CVE-2006-1289 OSVDB:23929  View
143781 17393 CVE-2006-1289 URL:http://www.osvdb.org/23929  View
143782 17393 CVE-2006-1289 OSVDB:23931  View
143783 17393 CVE-2006-1289 URL:http://www.osvdb.org/23931  View
143784 17393 CVE-2006-1289 SECTRACK:1015778  View
143785 17393 CVE-2006-1289 URL:http://securitytracker.com/id?1015778  View
143786 17393 CVE-2006-1289 SECUNIA:19258  View
143787 17393 CVE-2006-1289 URL:http://secunia.com/advisories/19258  View
143788 17393 CVE-2006-1289 XF:milkeyway-admin-sql-injection(25287)  View
143789 17393 CVE-2006-1289 URL:http://xforce.iss.net/xforce/xfdb/25287  View
143790 17393 CVE-2006-1289 XF:milkeyway-multiple-sql-injection(25281)  View

Related JVN