CVE

Id
19988  
CVE No.
CVE-2006-3884  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184433 19988 CVE-2006-3884 BUGTRAQ:20060725 LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties  View
184434 19988 CVE-2006-3884 URL:http://www.securityfocus.com/archive/1/archive/1/441087/100/0/threaded  View
184435 19988 CVE-2006-3884 BID:19149  View
184436 19988 CVE-2006-3884 URL:http://www.securityfocus.com/bid/19149  View
184437 19988 CVE-2006-3884 VUPEN:ADV-2006-2983  View
184438 19988 CVE-2006-3884 URL:http://www.vupen.com/english/advisories/2006/2983  View
184439 19988 CVE-2006-3884 OSVDB:27518  View
184440 19988 CVE-2006-3884 URL:http://www.osvdb.org/27518  View
184441 19988 CVE-2006-3884 SECTRACK:1016584  View
184442 19988 CVE-2006-3884 URL:http://securitytracker.com/id?1016584  View
184443 19988 CVE-2006-3884 SECUNIA:21212  View
184444 19988 CVE-2006-3884 URL:http://secunia.com/advisories/21212  View
184445 19988 CVE-2006-3884 SREASON:1287  View
184446 19988 CVE-2006-3884 URL:http://securityreason.com/securityalert/1287  View
184447 19988 CVE-2006-3884 XF:linkscaffe-links-path-disclosure(27962)  View
184448 19988 CVE-2006-3884 URL:http://xforce.iss.net/xforce/xfdb/27962  View
184449 19988 CVE-2006-3884 XF:linkscaffe-links-sql-injection(27961)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60658 JVNDB-2006-002924 Shalwan MusicBox における SQL インジェクションの脆弱性 Shalwan MusicBox には、SQL インジェクションの脆弱性が存在します。 CVE-2006-3886 19988 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002924.html  View