CVE

Id
18669  
CVE No.
CVE-2006-2565  
Status
Candidate  
Description
SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id parameter in profile.php and (2) the aut_id parameter in userarticles.php. NOTE: the aut_id vector can produce resultant path disclosure if the SQL manipulation is invalid.  
Phase
Assigned (20060524)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
163321 18669 CVE-2006-2565 BUGTRAQ:20060522 Alstrasoft Article Manager Pro v1.6  View
163322 18669 CVE-2006-2565 URL:http://www.securityfocus.com/archive/1/archive/1/434847/100/0/threaded  View
163323 18669 CVE-2006-2565 VUPEN:ADV-2006-1943  View
163324 18669 CVE-2006-2565 URL:http://www.vupen.com/english/advisories/2006/1943  View
163325 18669 CVE-2006-2565 SECUNIA:20228  View
163326 18669 CVE-2006-2565 URL:http://secunia.com/advisories/20228  View
163327 18669 CVE-2006-2565 SREASON:949  View
163328 18669 CVE-2006-2565 URL:http://securityreason.com/securityalert/949  View
163329 18669 CVE-2006-2565 XF:article-manager-multi-scripts-path-disclosure(26676)  View
163330 18669 CVE-2006-2565 URL:http://xforce.iss.net/xforce/xfdb/26676  View
163331 18669 CVE-2006-2565 XF:article-manager-profile-sql-injection(26674)  View

Related JVN