CVE

Id
21766  
CVE No.
CVE-2006-5662  
Status
Candidate  
Description
SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands via (1) the username parameter in login.php and (2) a search on the "search page."  
Phase
Assigned (20061102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
208571 21766 CVE-2006-5662 BUGTRAQ:20061029 easy notes manager sql injection and authentication bypass  View
208572 21766 CVE-2006-5662 URL:http://www.securityfocus.com/archive/1/archive/1/450045/100/0/threaded  View
208573 21766 CVE-2006-5662 BID:20803  View
208574 21766 CVE-2006-5662 URL:http://www.securityfocus.com/bid/20803  View
208575 21766 CVE-2006-5662 SREASON:1819  View
208576 21766 CVE-2006-5662 URL:http://securityreason.com/securityalert/1819  View
208577 21766 CVE-2006-5662 XF:enm-search-sql-injection(29913)  View
208578 21766 CVE-2006-5662 URL:http://xforce.iss.net/xforce/xfdb/29913  View
208579 21766 CVE-2006-5662 XF:enm-username-sql-injection(29908)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60092 JVNDB-2006-002358 IBM Informix Dynamic Server などの製品における "セキュリティを侵害される" 脆弱性 IBM Informix Dynamic Server、Informix Client Software Development Kit (CSDK)、および Informix I-Connect のインストールスクリプトには、"セキュリティを侵害される" 脆弱性が存在します。 CVE-2006-5664 21766 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002358.html  View