CVE

Id
21010  
CVE No.
CVE-2006-4906  
Status
Candidate  
Description
SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the new_calendarid parameter.  
Phase
Assigned (20060920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
199193 21010 CVE-2006-4906 MILW0RM:2394  View
199194 21010 CVE-2006-4906 URL:http://milw0rm.com/exploits/2394  View
199195 21010 CVE-2006-4906 BID:20100  View
199196 21010 CVE-2006-4906 URL:http://www.securityfocus.com/bid/20100  View
199197 21010 CVE-2006-4906 VUPEN:ADV-2006-3718  View
199198 21010 CVE-2006-4906 URL:http://www.vupen.com/english/advisories/2006/3718  View
199199 21010 CVE-2006-4906 SECUNIA:22007  View
199200 21010 CVE-2006-4906 URL:http://secunia.com/advisories/22007  View
199201 21010 CVE-2006-4906 XF:moregroupware-week-sql-injection(29027)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59870 JVNDB-2006-002136 OSU における重要な情報を取得される脆弱性 OSU には、重要な情報を取得される脆弱性が存在します。 CVE-2006-4908 21010 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002136.html  View