CVE

Id
22261  
CVE No.
CVE-2006-6157  
Status
Candidate  
Description
SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter. NOTE: this issue can be leveraged for path disclosure with an invalid pageid parameter.  
Phase
Assigned (20061128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
215067 22261 CVE-2006-6157 BUGTRAQ:20061121 ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities  View
215068 22261 CVE-2006-6157 URL:http://www.securityfocus.com/archive/1/archive/1/452231/100/100/threaded  View
215069 22261 CVE-2006-6157 MILW0RM:2822  View
215070 22261 CVE-2006-6157 URL:http://www.milw0rm.com/exploits/2822  View
215071 22261 CVE-2006-6157 MISC:http://www.0xcafebabe.it/sploits/contentnow_139_sqlinj.pl  View
215072 22261 CVE-2006-6157 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=161604&release_id=465437  View
215073 22261 CVE-2006-6157 BID:21237  View
215074 22261 CVE-2006-6157 URL:http://www.securityfocus.com/bid/21237  View
215075 22261 CVE-2006-6157 VUPEN:ADV-2006-4663  View
215076 22261 CVE-2006-6157 URL:http://www.vupen.com/english/advisories/2006/4663  View
215077 22261 CVE-2006-6157 SECTRACK:1017265  View
215078 22261 CVE-2006-6157 URL:http://securitytracker.com/id?1017265  View
215079 22261 CVE-2006-6157 SECUNIA:23005  View
215080 22261 CVE-2006-6157 URL:http://secunia.com/advisories/23005  View
215081 22261 CVE-2006-6157 SREASON:1925  View
215082 22261 CVE-2006-6157 URL:http://securityreason.com/securityalert/1925  View
215083 22261 CVE-2006-6157 XF:contentnow-index-sql-injection(30459)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59367 JVNDB-2006-001633 DeskPRO の newticket.php におけるクロスサイトスクリプティングの脆弱性 DeskPRO の newticket.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6159 22261 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001633.html  View