CVE

Id
19990  
CVE No.
CVE-2006-3886  
Status
Candidate  
Description
SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter in a viewgallery action in a request for the top-level URI. NOTE: the start parameter/search action is already covered by CVE-2006-1807, and the show parameter/top action is already covered by CVE-2006-1360.  
Phase
Assigned (20060726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
184466 19990 CVE-2006-3886 BUGTRAQ:20060724 MusicBox <= 2.3.4 XSS SQL injection Vulnerability  View
184467 19990 CVE-2006-3886 URL:http://www.securityfocus.com/archive/1/archive/1/441000/100/0/threaded  View
184468 19990 CVE-2006-3886 BID:19129  View
184469 19990 CVE-2006-3886 URL:http://www.securityfocus.com/bid/19129  View
184470 19990 CVE-2006-3886 SREASON:1284  View
184471 19990 CVE-2006-3886 URL:http://securityreason.com/securityalert/1284  View
184472 19990 CVE-2006-3886 XF:musicbox-multiple-sql-injection(27926)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58760 JVNDB-2006-001026 America Online Security Edition で使用される AOL.YGP Pic Downloader YGPPDownload ActiveX におけるバッファオーバーフローの脆弱性 America Online Security Edition で使用される AOL You"ve Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX コントロール (AOL.PicDownloadCtrl.1, YGPPicDownload.dll) には、バッファオーバーフローの脆弱性が存在します。 CVE-2006-3888 19990 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001026.html  View