CVE

Id
17932  
CVE No.
CVE-2006-1828  
Status
Candidate  
Description
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.  
Phase
Assigned (20060419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
152723 17932 CVE-2006-1828 MILW0RM:1666  View
152724 17932 CVE-2006-1828 URL:http://milw0rm.com/exploits/1666  View
152725 17932 CVE-2006-1828 MISC:http://retrogod.altervista.org/php121im_14_sql_xpl.html  View
152726 17932 CVE-2006-1828 BID:17509  View
152727 17932 CVE-2006-1828 URL:http://www.securityfocus.com/bid/17509  View
152728 17932 CVE-2006-1828 VUPEN:ADV-2006-1349  View
152729 17932 CVE-2006-1828 URL:http://www.vupen.com/english/advisories/2006/1349  View
152730 17932 CVE-2006-1828 SECTRACK:1015936  View
152731 17932 CVE-2006-1828 URL:http://securitytracker.com/id?1015936  View
152732 17932 CVE-2006-1828 SECUNIA:19643  View
152733 17932 CVE-2006-1828 URL:http://secunia.com/advisories/19643  View
152734 17932 CVE-2006-1828 XF:php121-php121login-sql-injection(25785)  View

Related JVN