CVE

Id
22036  
CVE No.
CVE-2006-5932  
Status
Candidate  
Description
Kahua before 0.7, when running multiple applications under a single supervisor, grants application access on the basis of username instead of username and database name, which allows remote authenticated users to obtain unauthorized access if different databases assign the same username to different user accounts.  
Phase
Assigned (20061115)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
212193 22036 CVE-2006-5932 CONFIRM:http://www.kahua.org/cgi-bin/kahua.fcgi/kahua-web/show/KSA/KSA2006-001  View
212194 22036 CVE-2006-5932 CONFIRM:http://www.timedia.co.jp/news/2467470581  View
212195 22036 CVE-2006-5932 BID:21074  View
212196 22036 CVE-2006-5932 URL:http://www.securityfocus.com/bid/21074  View
212197 22036 CVE-2006-5932 VUPEN:ADV-2006-4486  View
212198 22036 CVE-2006-5932 URL:http://www.vupen.com/english/advisories/2006/4486  View
212199 22036 CVE-2006-5932 SECUNIA:22785  View
212200 22036 CVE-2006-5932 URL:http://secunia.com/advisories/22785  View
212201 22036 CVE-2006-5932 XF:kahua-databases-authentication-bypass(30206)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60152 JVNDB-2006-002418 Estate Agent Manager の admin/default.asp における SQL インジェクションの脆弱性 Estate Agent Manager の admin/default.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2006-5934 22036 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002418.html  View