CVE

Id
19436  
CVE No.
CVE-2006-3332  
Status
Candidate  
Description
SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters.  
Phase
Assigned (20060630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
174466 19436 CVE-2006-3332 MISC:http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html  View
174467 19436 CVE-2006-3332 BID:18681  View
174468 19436 CVE-2006-3332 URL:http://www.securityfocus.com/bid/18681  View
174469 19436 CVE-2006-3332 SECTRACK:1016386  View
174470 19436 CVE-2006-3332 URL:http://securitytracker.com/id?1016386  View
174471 19436 CVE-2006-3332 XF:zorum-index-sql-injection(24372)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58711 JVNDB-2006-000977 libpng の png_decompress_chunk() 関数におけるバッファオーバーフローの脆弱性 libpng の pngrutil.c には、png_decompress_chunk() 関数において、エラーチャンク処理に不備が存在するために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-3334 19436 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000977.html  View