CVE

Id
19702  
CVE No.
CVE-2006-3598  
Status
Candidate  
Description
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178451 19702 CVE-2006-3598 BUGTRAQ:20060628 PHP-Nuke Module"s Name Sections<<--V3 SQL Injection  View
178452 19702 CVE-2006-3598 URL:http://www.securityfocus.com/archive/1/archive/1/438596/100/200/threaded  View
178453 19702 CVE-2006-3598 MILW0RM:5154  View
178454 19702 CVE-2006-3598 URL:http://www.milw0rm.com/exploits/5154  View
178455 19702 CVE-2006-3598 BID:27879  View
178456 19702 CVE-2006-3598 URL:http://www.securityfocus.com/bid/27879  View
178457 19702 CVE-2006-3598 XF:phpnuke-module-sqlinjection(27501)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60493 JVNDB-2006-002759 TunePimp の LookupTRM::lookup 関数におけるスタックベースのバッファーオーバーフローの脆弱性 libtunepimp (TunePimp) の LookupTRM::lookup 関数には、スタックベースのバッファーオーバーフローの脆弱性が存在します。 CVE-2006-3600 19702 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002759.html  View