CVE

Id
20996  
CVE No.
CVE-2006-4892  
Status
Candidate  
Description
SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.  
Phase
Assigned (20060919)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199051 20996 CVE-2006-4892 BUGTRAQ:20060917 Techno Dreams FAQ Manager Package v1.0(faqview.asp) Remote SQL Injection Vulnerability  View
199052 20996 CVE-2006-4892 URL:http://www.securityfocus.com/archive/1/archive/1/446259/100/0/threaded  View
199053 20996 CVE-2006-4892 MILW0RM:2385  View
199054 20996 CVE-2006-4892 URL:http://milw0rm.com/exploits/2385  View
199055 20996 CVE-2006-4892 BID:20074  View
199056 20996 CVE-2006-4892 URL:http://www.securityfocus.com/bid/20074  View
199057 20996 CVE-2006-4892 VUPEN:ADV-2006-3681  View
199058 20996 CVE-2006-4892 URL:http://www.vupen.com/english/advisories/2006/3681  View
199059 20996 CVE-2006-4892 SECUNIA:21977  View
199060 20996 CVE-2006-4892 URL:http://secunia.com/advisories/21977  View
199061 20996 CVE-2006-4892 SREASON:1615  View
199062 20996 CVE-2006-4892 URL:http://securityreason.com/securityalert/1615  View
199063 20996 CVE-2006-4892 XF:technodreams-faqview-sql-injection(28976)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59866 JVNDB-2006-002132 iDevSpot NixieAffiliate の forms/lostpassword.php におけるクロスサイトスクリプティングの脆弱性 iDevSpot NixieAffiliate の forms/lostpassword.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4894 20996 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002132.html  View