CVE

Id
17898  
CVE No.
CVE-2006-1794  
Status
Candidate  
Description
SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php).  
Phase
Assigned (20060417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152380 17898 CVE-2006-1794 BUGTRAQ:20060224 Mambo Multiple Vulnerabilities  View
152381 17898 CVE-2006-1794 URL:http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html  View
152382 17898 CVE-2006-1794 MISC:http://www.gulftech.org/?node=research&article_id=00104-02242006  View
152383 17898 CVE-2006-1794 CONFIRM:http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/  View
152384 17898 CVE-2006-1794 BID:16775  View
152385 17898 CVE-2006-1794 URL:http://www.securityfocus.com/bid/16775  View
152386 17898 CVE-2006-1794 VUPEN:ADV-2006-0719  View
152387 17898 CVE-2006-1794 URL:http://www.vupen.com/english/advisories/2006/0719  View
152388 17898 CVE-2006-1794 OSVDB:23402  View
152389 17898 CVE-2006-1794 URL:http://www.osvdb.org/23402  View
152390 17898 CVE-2006-1794 OSVDB:23503  View
152391 17898 CVE-2006-1794 URL:http://www.osvdb.org/23503  View
152392 17898 CVE-2006-1794 SECUNIA:18935  View
152393 17898 CVE-2006-1794 URL:http://secunia.com/advisories/18935  View
152394 17898 CVE-2006-1794 XF:mambo-index2-sql-injection(24951)  View

Related JVN