CVE

Id
21249  
CVE No.
CVE-2006-5145  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.  
Phase
Assigned (20061002)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
202017 21249 CVE-2006-5145 BUGTRAQ:20060930 OlateDownload 3.4.0 Multiple Vulnerabilities  View
202018 21249 CVE-2006-5145 URL:http://www.securityfocus.com/archive/1/archive/1/447424/100/0/threaded  View
202019 21249 CVE-2006-5145 BID:20278  View
202020 21249 CVE-2006-5145 URL:http://www.securityfocus.com/bid/20278  View
202021 21249 CVE-2006-5145 SECUNIA:22241  View
202022 21249 CVE-2006-5145 URL:http://secunia.com/advisories/22241  View
202023 21249 CVE-2006-5145 SREASON:1680  View
202024 21249 CVE-2006-5145 URL:http://securityreason.com/securityalert/1680  View
202025 21249 CVE-2006-5145 XF:olate-download-detailes-search-sql-injection(29294)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60994 JVNDB-2006-003260 VAMP Webmail の wamp_dir/setup/yesno.phtml における PHP リモートファイルインクルージョンの脆弱性 VAMP Webmail の wamp_dir/setup/yesno.phtml には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5147 21249 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003260.html  View