CVE

Id
21733  
CVE No.
CVE-2006-5629  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.  
Phase
Assigned (20061031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208221 21733 CVE-2006-5629 BUGTRAQ:20071213 Hosting Controller - Multiple Security Bugs (Extremely Critical)  View
208222 21733 CVE-2006-5629 URL:http://www.securityfocus.com/archive/1/archive/1/485028/100/0/threaded  View
208223 21733 CVE-2006-5629 MILW0RM:4730  View
208224 21733 CVE-2006-5629 URL:http://www.milw0rm.com/exploits/4730  View
208225 21733 CVE-2006-5629 MISC:http://www.kapda.ir/advisory-442.html  View
208226 21733 CVE-2006-5629 CONFIRM:http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html  View
208227 21733 CVE-2006-5629 BID:20661  View
208228 21733 CVE-2006-5629 URL:http://www.securityfocus.com/bid/20661  View
208229 21733 CVE-2006-5629 BID:26862  View
208230 21733 CVE-2006-5629 URL:http://www.securityfocus.com/bid/26862  View
208231 21733 CVE-2006-5629 VUPEN:ADV-2006-4296  View
208232 21733 CVE-2006-5629 URL:http://www.vupen.com/english/advisories/2006/4296  View
208233 21733 CVE-2006-5629 SECTRACK:1017103  View
208234 21733 CVE-2006-5629 URL:http://securitytracker.com/id?1017103  View
208235 21733 CVE-2006-5629 SECUNIA:22607  View
208236 21733 CVE-2006-5629 URL:http://secunia.com/advisories/22607  View
208237 21733 CVE-2006-5629 SECUNIA:28973  View
208238 21733 CVE-2006-5629 URL:http://secunia.com/advisories/28973  View
208239 21733 CVE-2006-5629 XF:hostingcontroller-multiple-sql-injection(39036)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60084 JVNDB-2006-002350 iG Shop の change_pass.php におけるクロスサイトスクリプティングの脆弱性 iG Shop の change_pass.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5631 21733 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002350.html  View