CVE

Id
18166  
CVE No.
CVE-2006-2062  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the (1) banner parameter in agent_links.pl; the offset parameter in (2) agent_links.pl, (3) agent_transactions.pl, (4) agent_subaffiliates.pl, and (5) agent_summary.pl; the camp_id parameter in (6) agent_transactions_csv.pl, (7) agent_subaffiliates.pl, and (8) agent_camp_det.pl; the (9) login parameter in agent_commission_statement.pl; the logged parameter in (10) agent_commission_statement.pl and (11) agent_camp_det.pl; the (12) agent_id parameter in agent_commission_statement.pl; and the (13) sub parameter in unspecified files.  
Phase
Assigned (20060426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156458 18166 CVE-2006-2062 MISC:http://pridels0.blogspot.com/2006/04/leadhound-multiple-vuln.html  View
156459 18166 CVE-2006-2062 OSVDB:25023  View
156460 18166 CVE-2006-2062 URL:http://www.osvdb.org/25023  View
156461 18166 CVE-2006-2062 OSVDB:25024  View
156462 18166 CVE-2006-2062 URL:http://www.osvdb.org/25024  View
156463 18166 CVE-2006-2062 OSVDB:25025  View
156464 18166 CVE-2006-2062 URL:http://www.osvdb.org/25025  View
156465 18166 CVE-2006-2062 OSVDB:25026  View
156466 18166 CVE-2006-2062 URL:http://www.osvdb.org/25026  View
156467 18166 CVE-2006-2062 OSVDB:25027  View
156468 18166 CVE-2006-2062 URL:http://www.osvdb.org/25027  View
156469 18166 CVE-2006-2062 OSVDB:25028  View
156470 18166 CVE-2006-2062 URL:http://www.osvdb.org/25028  View
156471 18166 CVE-2006-2062 OSVDB:25029  View
156472 18166 CVE-2006-2062 URL:http://www.osvdb.org/25029  View
156473 18166 CVE-2006-2062 SECUNIA:19867  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58045 JVNDB-2006-000241 Sun Solaris の特定のスレッドに上書きされる脆弱性 Sun Solaris には、特権を持つアプリケーションが libpkcs11(3LIB) ライブラリにリンクされ、 getpwnam(3C) 関数群のうち再入不可能な関数を利用している場合に、特定のスレッドにおけるデータを不適切に上書きしてしまう脆弱性が存在します。 CVE-2006-2064 18166 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000241.html  View