CVE

Id
17638  
CVE No.
CVE-2006-1534  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via (1) the user_email parameter in (a) lostpass.php, and the (2) user_email and (3) user_username parameters in (b) sub.php and (c) unsub.php.  
Phase
Assigned (20060330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147466 17638 CVE-2006-1534 BUGTRAQ:20060408 [eVuln] Null news SQL Injection Vulnerability  View
147467 17638 CVE-2006-1534 URL:http://www.securityfocus.com/archive/1/archive/1/430298/100/0/threaded  View
147468 17638 CVE-2006-1534 MISC:http://evuln.com/vulns/109/summary.html  View
147469 17638 CVE-2006-1534 BID:17300  View
147470 17638 CVE-2006-1534 URL:http://www.securityfocus.com/bid/17300  View
147471 17638 CVE-2006-1534 VUPEN:ADV-2006-1151  View
147472 17638 CVE-2006-1534 URL:http://www.vupen.com/english/advisories/2006/1151  View
147473 17638 CVE-2006-1534 OSVDB:24240  View
147474 17638 CVE-2006-1534 URL:http://www.osvdb.org/24240  View
147475 17638 CVE-2006-1534 OSVDB:24241  View
147476 17638 CVE-2006-1534 URL:http://www.osvdb.org/24241  View
147477 17638 CVE-2006-1534 OSVDB:24242  View
147478 17638 CVE-2006-1534 URL:http://www.osvdb.org/24242  View
147479 17638 CVE-2006-1534 SECUNIA:19413  View
147480 17638 CVE-2006-1534 URL:http://secunia.com/advisories/19413  View
147481 17638 CVE-2006-1534 SREASON:682  View
147482 17638 CVE-2006-1534 URL:http://securityreason.com/securityalert/682  View
147483 17638 CVE-2006-1534 XF:nullnews-multiple-sql-injection(25502)  View

Related JVN