CVE

Id
22012  
CVE No.
CVE-2006-5908  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.  
Phase
Assigned (20061115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
211880 22012 CVE-2006-5908 BUGTRAQ:20061108 Y.A.N.S sql injection  View
211881 22012 CVE-2006-5908 URL:http://archives.neohapsis.com/archives/bugtraq/2006-11/0121.html  View
211882 22012 CVE-2006-5908 BID:20963  View
211883 22012 CVE-2006-5908 URL:http://www.securityfocus.com/bid/20963  View
211884 22012 CVE-2006-5908 SREASON:1866  View
211885 22012 CVE-2006-5908 URL:http://securityreason.com/securityalert/1866  View
211886 22012 CVE-2006-5908 XF:yans-username-sql-injection(30119)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59280 JVNDB-2006-001546 Campware Campsite における PHP リモートファイルインクルージョンの脆弱性 Campware Campsite には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5910 22012 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001546.html  View