CVE

Id
20481  
CVE No.
CVE-2006-4377  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the (1) profil_nr and (2) sprache parameters in the main portion of the portal, the (3) suchstring field in suchForm in the main portion of the portal, the (4) GaleryKey and (5) Breadcrumbs parameters in the gallerie module, and the (6) GGBNSaction parameter in the ggbns module.  
Phase
Assigned (20060825)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
191970 20481 CVE-2006-4377 BUGTRAQ:20060820 Tons of SQL-injections and XSS in Eichhorn Portal and vendor page  View
191971 20481 CVE-2006-4377 URL:http://www.securityfocus.com/archive/1/archive/1/444065/100/0/threaded  View
191972 20481 CVE-2006-4377 SREASON:1458  View
191973 20481 CVE-2006-4377 URL:http://securityreason.com/securityalert/1458  View
191974 20481 CVE-2006-4377 XF:eichhorn-multiple-sql-injection(28535)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59740 JVNDB-2006-002006 Ipswitch Collaboration の SMTP Daemon におけるスタックベースのバッファオーバーフローの脆弱性 Ipswitch Collaboration 2006、IMail、IMail Plus および IMail Secure の SMTP Daemon には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-4379 20481 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002006.html  View