CVE

Id
17661  
CVE No.
CVE-2006-1557  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php.  
Phase
Assigned (20060331)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
147814 17661 CVE-2006-1557 BUGTRAQ:20060330 X-Changer <=v0.2 Demo SQL injection  View
147815 17661 CVE-2006-1557 URL:http://www.securityfocus.com/archive/1/archive/1/429359/100/0/threaded  View
147816 17661 CVE-2006-1557 BID:17322  View
147817 17661 CVE-2006-1557 URL:http://www.securityfocus.com/bid/17322  View
147818 17661 CVE-2006-1557 VUPEN:ADV-2006-1188  View
147819 17661 CVE-2006-1557 URL:http://www.vupen.com/english/advisories/2006/1188  View
147820 17661 CVE-2006-1557 OSVDB:24288  View
147821 17661 CVE-2006-1557 URL:http://www.osvdb.org/24288  View
147822 17661 CVE-2006-1557 SECUNIA:19459  View
147823 17661 CVE-2006-1557 URL:http://secunia.com/advisories/19459  View
147824 17661 CVE-2006-1557 SREASON:654  View
147825 17661 CVE-2006-1557 URL:http://securityreason.com/securityalert/654  View
147826 17661 CVE-2006-1557 XF:xchanger-index-sql-injection(25549)  View

Related JVN