CVE

Id
21944  
CVE No.
CVE-2006-5840  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853. NOTE: the vendor has notified CVE that the current version only creates static pages, and that slistl.php/slid never existed in any version.  
Phase
Assigned (20061109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
210894 21944 CVE-2006-5840 BUGTRAQ:20061108 Abarcar Realty Portal [injection sql]  View
210895 21944 CVE-2006-5840 URL:http://www.securityfocus.com/archive/1/archive/1/450946/100/0/threaded  View
210896 21944 CVE-2006-5840 MISC:http://s-a-p.ca/index.php?page=OurAdvisories&id=7  View
210897 21944 CVE-2006-5840 VIM:20061207 Vendor dispute - CVE-2006-5840 (abarcar Realty Portal)  View
210898 21944 CVE-2006-5840 URL:http://www.attrition.org/pipermail/vim/2006-December/001170.html  View
210899 21944 CVE-2006-5840 VIM:20061219 abarcar vendor statement on CVE-2006-5840  View
210900 21944 CVE-2006-5840 URL:http://attrition.org/pipermail/vim/2006-December/001190.html  View
210901 21944 CVE-2006-5840 BID:20970  View
210902 21944 CVE-2006-5840 URL:http://www.securityfocus.com/bid/20970  View
210903 21944 CVE-2006-5840 VUPEN:ADV-2006-4418  View
210904 21944 CVE-2006-5840 URL:http://www.vupen.com/english/advisories/2006/4418  View
210905 21944 CVE-2006-5840 OSVDB:30249  View
210906 21944 CVE-2006-5840 URL:http://www.osvdb.org/30249  View
210907 21944 CVE-2006-5840 OSVDB:30250  View
210908 21944 CVE-2006-5840 URL:http://www.osvdb.org/30250  View
210909 21944 CVE-2006-5840 SECUNIA:22792  View
210910 21944 CVE-2006-5840 URL:http://secunia.com/advisories/22792  View
210911 21944 CVE-2006-5840 SREASON:1840  View
210912 21944 CVE-2006-5840 URL:http://securityreason.com/securityalert/1840  View
210913 21944 CVE-2006-5840 XF:abarcar-realty-newsdetails-sql-injection(30135)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61170 JVNDB-2006-003436 Unicore Client の keystore ファイルにおける重要な情報を取得される脆弱性 Unicore Client の keystore ファイルは、Unix システム上で稼動している際、安全でないデフォルトパーミッションを伴うため、重要な情報を取得される脆弱性が存在します。 CVE-2006-5842 21944 2.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003436.html  View