CVE

Id
20976  
CVE No.
CVE-2006-4872  
Status
Candidate  
Description
SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
198818 20976 CVE-2006-4872 BUGTRAQ:20060917 ECardPro v2.0(search.asp) Remote SQL Injection Vulnerability  View
198819 20976 CVE-2006-4872 URL:http://www.securityfocus.com/archive/1/archive/1/446319/100/0/threaded  View
198820 20976 CVE-2006-4872 BID:20080  View
198821 20976 CVE-2006-4872 URL:http://www.securityfocus.com/bid/20080  View
198822 20976 CVE-2006-4872 VUPEN:ADV-2006-3689  View
198823 20976 CVE-2006-4872 URL:http://www.vupen.com/english/advisories/2006/3689  View
198824 20976 CVE-2006-4872 SECTRACK:1016882  View
198825 20976 CVE-2006-4872 URL:http://securitytracker.com/id?1016882  View
198826 20976 CVE-2006-4872 SECUNIA:22013  View
198827 20976 CVE-2006-4872 URL:http://secunia.com/advisories/22013  View
198828 20976 CVE-2006-4872 SREASON:1609  View
198829 20976 CVE-2006-4872 URL:http://securityreason.com/securityalert/1609  View
198830 20976 CVE-2006-4872 XF:ecardpro-search-sql-injection(29015)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59859 JVNDB-2006-002125 Jupiter CMS におけるクロスサイトスクリプティングの脆弱性 Jupiter CMS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4874 20976 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002125.html  View